FL
Vendor
flippercode
18
CVEs
0
On KEV
0
New 30D
Products
WM8.8
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters
flippercode
5 CVEs0 on KEV0 new
WM7.5
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings
flippercode
2 CVEs0 on KEV0 new
AG4.3
Advanced Google Maps
flippercode
1 CVEs0 on KEV0 new
CC4.3
Custom css-js-php
flippercode
1 CVEs0 on KEV0 new
GM8.8
Google Map
Flippercode
1 CVEs0 on KEV0 new
TP6.4
Text Prompter – Unlimited chatgpt text prompts for openai tasks
flippercode
1 CVEs0 on KEV0 new
WP5.4
WordPress Plugin for Google Maps – WP MAPS
flippercode
1 CVEs0 on KEV0 new
WP8.8
WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin)
flippercode
1 CVEs0 on KEV0 new
WG5.4
WP Google Map
Flippercode
1 CVEs0 on KEV0 new
WM4.4
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters
flippercode
1 CVEs0 on KEV0 new
WM9.8
WP Maps Pro
flippercode
1 CVEs0 on KEV0 new
WS4.3
WP Security Question
flippercode
1 CVEs0 on KEV0 new
WP4.3
Wp-security-questions
Flippercode
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13179 | WM WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings flippercode | 6.4 | Sep 25 | WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter |
| CVE-2026-13456 | WM WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings flippercode | 7.5 | Sep 25 | WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter |
| CVE-2026-9594 | WM WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters flippercode | 4.4 | Jun 6 | WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter |
| CVE-2026-8732 | WM WP Maps Pro flippercode | 9.8 | May 29 | WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action |
| CVE-2025-13364 | WM WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters flippercode | 6.4 | Apr 16 | WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode |
| CVE-2026-2580 | WM WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters flippercode | 7.5 | Mar 22 | WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter |
| CVE-2026-3222 | WM WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters flippercode | 7.5 | Mar 11 | WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameter |
| CVE-2025-12062 | WM WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters flippercode | 8.8 | Feb 16 | WP Maps <= 4.8.6 - Authenticated (Subscriber+) Limited Local File Inclusion |
| CVE-2025-39465 | AG Advanced Google Maps flippercode | 4.3 | Nov 6 | WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability |
| CVE-2024-11896 | TP Text Prompter – Unlimited chatgpt text prompts for openai tasks flippercode | 6.4 | Dec 24 | Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-2386 | WM WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters flippercode | 8.8 | Jun 29 | WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection |
| CVE-2023-28172 | WP WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) flippercode | 8.8 | Nov 12 | WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2021-4418 | CC Custom css-js-php flippercode | 4.3 | Oct 20 | Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypass |
| CVE-2021-4386 | WS WP Security Question flippercode | 4.3 | Jul 1 | WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass |
| CVE-2023-23878 | WP WordPress Plugin for Google Maps – WP MAPS flippercode | 5.4 | Apr 4 | WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2018-0577 | WG WP Google Map Flippercode | 5.4 | May 14 | Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified… |