# wpgmaps WP Go Maps (formerly WP Google Maps).

Every CVE that names wpgmaps WP Go Maps (formerly WP Google Maps) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings](https://agentprime.io/advisories/CVE-2026-4268.md)
  `CVE-2026-4268` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 6.4 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site scripting (XSS)
- [WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification](https://agentprime.io/advisories/CVE-2026-0593.md)
  `CVE-2026-0593` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 5.3 Medium · Not analysed yet · Published 24 Jan 2026 · Tags: Broken access control
- [WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning](https://agentprime.io/advisories/CVE-2025-11703.md)
  `CVE-2025-11703` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2025 · Tags: CWE-349
- [WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update](https://agentprime.io/advisories/CVE-2025-11166.md)
  `CVE-2025-11166` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 5.4 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-5994.md)
  `CVE-2024-5994` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 6.4 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Cross-site scripting (XSS)
- [WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode](https://agentprime.io/advisories/CVE-2024-3557.md)
  `CVE-2024-3557` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 6.4 Medium · Not analysed yet · Published 24 May 2024 · Tags: Cross-site scripting (XSS)
- [WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service](https://agentprime.io/advisories/CVE-2023-6777.md)
  `CVE-2023-6777` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 5.3 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Information disclosure
- [WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode](https://agentprime.io/advisories/CVE-2024-1582.md)
  `CVE-2024-1582` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 6.4 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Cross-site scripting (XSS)
- [WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2023-4839.md)
  `CVE-2023-4839` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 4.4 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Cross-site scripting (XSS)
- [WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting](https://agentprime.io/advisories/CVE-2023-6697.md)
  `CVE-2023-6697` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 6.1 Medium · Not analysed yet · Published 24 Jan 2024 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=wpgmaps-wp-go-maps-formerly-wp-google-maps>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/wpgmaps-wp-go-maps-formerly-wp-google-maps/>. Everything for agents: <https://agentprime.io/llms.txt>.