All products
wp-google-map-plugin
WordPress · Plugin31 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values ParameterCVE-2026-13179 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' ParameterCVE-2026-13456 |
wp-google-map-plugin |
WordPress |
High
|
Fix reported |
|
| WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters <= 4.9.9 - Authenticated (Administrator+) SQL InjectionCVE-2026-66618 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 4.9.8 - Missing AuthorizationCVE-2026-18466 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| Maps <= 4.9.6 - Authenticated (Subscriber+) Denial of ServiceCVE-2026-16265 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters <= 4.9.6 - Authenticated (Subscriber+) Information ExposureCVE-2026-28144 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 4.9.3 - Authenticated (Subscriber+) Local File InclusionCVE-2026-6381 |
wp-google-map-plugin |
WordPress |
High
|
Fix reported |
|
| WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' ParameterCVE-2026-9594 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' ShortcodeCVE-2025-13364 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL InjectionCVE-2026-39492 |
wp-google-map-plugin |
WordPress |
High
|
Fix reported |
|
| WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' ParameterCVE-2026-2580 |
wp-google-map-plugin |
WordPress |
High
|
Fix reported |
|
| WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' ParameterCVE-2026-3222 |
wp-google-map-plugin |
WordPress |
High
|
Fix reported |
|
| WP Maps <= 4.8.6 - Authenticated (Subscriber+) Limited Local File InclusionCVE-2025-12062 |
wp-google-map-plugin |
WordPress |
High
|
Fix reported |
|
| Maps <= 4.8.6 - Authenticated (Administrator+) PHP Object InjectionCVE-2025-67535 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WP Maps – Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-3502 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WP Maps – Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-3503 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WP Maps – Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-3504 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
| WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL InjectionCVE-2024-2386 |
wp-google-map-plugin |
WordPress |
High
|
Fix reported |
|
| WP Google Map Plugin < 2.3.10 - Cross-Site Request ForgeryCVE-2015-9308 |
wp-google-map-plugin |
WordPress |
High
|
Fix reported |
|
| WP Google Map Plugin < 2.3.7 - Reflected Cross-Site ScriptingCVE-2015-9305 |
wp-google-map-plugin |
WordPress |
Medium
|
Fix reported |
|
