WM
Product
WP Maps
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 7Low 0
Watch
Add WP Maps to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28172 | 8.8 | Nov 12 | WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF) Affected: through 4.4.2 |
| CVE-2022-25600 | 8.8 | Mar 11 | Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <= 4.2.3) Affected: before 4.2.4 |
| CVE-2015-9309 | 8.8 | Aug 14 | The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature Affected: before 2.3.10 |
| CVE-2015-9308 | 8.8 | Aug 14 | The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature Affected: before 2.3.10 |
| CVE-2015-9307 | 8.8 | Aug 14 | The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature Affected: before 2.3.10 |
| CVE-2021-24130 | 7.2 | Mar 18 | Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection… Affected: before 4.1.5 |
| CVE-2016-10878 | 6.1 | Aug 12 | The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS Affected: before 3.1.2 |
| CVE-2015-9305 | 6.1 | Aug 12 | The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions Affected: before 2.3.7 |
| CVE-2023-23878 | 5.4 | Apr 4 | WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS) Affected: before 4.4.0 |
| CVE-2025-3504 | 4.8 | May 1 | WP Maps < 4.7.2 - Admin+ Stored XSS Affected: before 4.7.2 |
| CVE-2025-3503 | 4.8 | May 1 | WP Maps < 4.7.2 - Admin+ Stored XSS Affected: before 4.7.2 |
| CVE-2025-3502 | 4.8 | May 1 | WP Maps < 4.7.2 - Admin+ Stored XSS Affected: before 4.7.2 |
| CVE-2021-24502 | 4.8 | Aug 9 | The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scripting issue by high… Affected: before 1.7.7 |
Showing 13