Wp Maps (Weplugins) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 122 known versions, newest CVE from 2025-05-01. Vendor: Weplugins.
CVEs of Wp Maps
- CVE-2025-3504 - CVSS 4.8 (medium), 2025-05-01: The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to…
- CVE-2025-3502 - CVSS 4.8 (medium), 2025-05-01: The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to…
- CVE-2025-3503 - CVSS 4.8 (medium), 2025-05-01: The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to…
- CVE-2023-28172 - CVSS 8.8 (high), 2023-11-12: Cross-Site Request Forgery (CSRF) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) plugin <= 4.4.2…
- CVE-2023-23878 - CVSS 5.9 (medium), 2023-04-04: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin <= 4.3.9 versions.
- CVE-2022-25600 - CVSS 8.8 (high), 2022-03-11: Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <=…
- CVE-2021-24502 - CVSS 4.8 (medium), 2021-08-09: The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site…
- CVE-2021-24130 - CVSS 7.2 (high), 2021-03-18: Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable…
- CVE-2015-9309 - CVSS 8.8 (high), 2019-08-14: The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature.
- CVE-2015-9308 - CVSS 8.8 (high), 2019-08-14: The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.
- CVE-2015-9307 - CVSS 8.8 (high), 2019-08-14: The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature.
- CVE-2016-10878 - CVSS 6.1 (medium), 2019-08-12: The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS.
- CVE-2015-9305 - CVSS 6.1 (medium), 2019-08-12: The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions.
