WE
Vendor
Weplugins
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-3504 | WM WP Maps Weplugins | 4.8 | May 1 | WP Maps < 4.7.2 - Admin+ Stored XSS |
| CVE-2025-3503 | WM WP Maps Weplugins | 4.8 | May 1 | WP Maps < 4.7.2 - Admin+ Stored XSS |
| CVE-2025-3502 | WM WP Maps Weplugins | 4.8 | May 1 | WP Maps < 4.7.2 - Admin+ Stored XSS |
| CVE-2023-28172 | WM WP Maps Weplugins | 8.8 | Nov 12 | WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-23878 | WM WP Maps Weplugins | 5.4 | Apr 4 | WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-25600 | WM WP Maps Weplugins | 8.8 | Mar 11 | WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2021-24502 | WM WP Maps Weplugins | 4.8 | Aug 9 | The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scripting issue by high… |
| CVE-2021-24130 | WM WP Maps Weplugins | 7.2 | Mar 18 | Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection… |
| CVE-2015-9309 | WM WP Maps Weplugins | 8.8 | Aug 14 | The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature |
| CVE-2015-9308 | WM WP Maps Weplugins | 8.8 | Aug 14 | The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature |
| CVE-2015-9307 | WM WP Maps Weplugins | 8.8 | Aug 14 | The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature |
| CVE-2016-10878 | WM WP Maps Weplugins | 6.1 | Aug 12 | The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS |
| CVE-2015-9305 | WM WP Maps Weplugins | 6.1 | Aug 12 | The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions |
