Wp Maps (Unknown) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-19. Vendor: Unknown.

CVEs of Wp Maps

• CVE-2026-18466 - CVSS 5.4 (medium), 2026-08-19: The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a…
• CVE-2026-16265 - CVSS 6.5 (medium), 2026-08-07: The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches,…
• CVE-2026-16263 - CVSS 8.8 (high), 2026-08-07: The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path…
• CVE-2026-6381 - CVSS 7.5 (high), 2026-05-18: The WP Maps WordPress plugin before 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local…
• CVE-2025-3504 - CVSS 4.8 (medium), 2025-05-01: The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to…
• CVE-2025-3503 - CVSS 4.8 (medium), 2025-05-01: The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to…
• CVE-2025-3502 - CVSS 4.8 (medium), 2025-05-01: The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to…