Advisories · Technology
wpgmaps WP Go Maps (formerly WP Google Maps).
Every CVE that names wpgmaps WP Go Maps (formerly WP Google Maps) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings
- wpgmaps WP Go Maps (formerly WP Google Maps)
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification
- wpgmaps WP Go Maps (formerly WP Google Maps)
- Broken access control
- CVSS 5.3 Medium
WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning
- wpgmaps WP Go Maps (formerly WP Google Maps)
- CWE-349
- CVSS 5.4 Medium
WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update
- wpgmaps WP Go Maps (formerly WP Google Maps)
- Cross-site request forgery (CSRF)
- CVSS 6.4 Medium
WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
- wpgmaps WP Go Maps (formerly WP Google Maps)
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- wpgmaps WP Go Maps (formerly WP Google Maps)
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service
- wpgmaps WP Go Maps (formerly WP Google Maps)
- Information disclosure
- CVSS 6.4 Medium
WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- wpgmaps WP Go Maps (formerly WP Google Maps)
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting
- wpgmaps WP Go Maps (formerly WP Google Maps)
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting
- wpgmaps WP Go Maps (formerly WP Google Maps)
- Cross-site scripting (XSS)