Flippercode vulnerabilities

Products

• Wp Maps – Store Locator,google Maps,openstreetmap,mapbox,listing,directory & Filters 5
• Wp Maps Pro 4
• Wp Maps – Google Maps, Openstreetmap, Mapbox, Store Locator With Search, Filters & Listings 2

Newest

• flippercode wp maps – google maps, openstreetmap, mapbox, store locator with search, filters & listings WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter CVE-2026-13179 6.4 MediumSeptember 25, 2026
• flippercode wp maps – google maps, openstreetmap, mapbox, store locator with search, filters & listings WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter CVE-2026-13456 7.5 HighSeptember 25, 2026
• flippercode wp maps pro WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion CVE-2026-18465 6.5 MediumAugust 9, 2026
• flippercode wp maps pro WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service CVE-2026-18464 Public exploit 7.5 HighAugust 9, 2026
• flippercode wp maps pro Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation CVE-2026-8935 9.8 CriticalJune 15, 2026
• flippercode wp maps – google maps,openstreetmap,mapbox,store locator,listing,directory & filters WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter CVE-2026-9594 4.4 MediumJune 6, 2026
• flippercode wp maps pro WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action CVE-2026-8732 Public exploit EPSS 20.4% 9.8 CriticalMay 29, 2026
• flippercode wp maps – store locator,google maps,openstreetmap,mapbox,listing,directory & filters WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode CVE-2025-13364 6.4 MediumApril 16, 2026
• flippercode wp maps – store locator,google maps,openstreetmap,mapbox,listing,directory & filters WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter CVE-2026-2580 7.5 HighMarch 22, 2026
• flippercode wp maps – store locator,google maps,openstreetmap,mapbox,listing,directory & filters WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameter CVE-2026-3222 7.5 HighMarch 11, 2026
• flippercode wp maps – store locator,google maps,openstreetmap,mapbox,listing,directory & filters WP Maps <= 4.8.6 - Authenticated (Subscriber+) Limited Local File Inclusion CVE-2025-12062 8.8 HighFebruary 16, 2026
• flippercode advanced google maps WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability CVE-2025-39465 4.3 MediumNovember 6, 2025
• flippercode text prompter – unlimited chatgpt text prompts for openai tasks Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11896 6.4 MediumDecember 24, 2024
• flippercode google map, wp maps – store locator,google maps,openstreetmap,mapbox,listing,directory & filters +1 more WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection CVE-2024-2386 8.8 HighJune 29, 2024
• flippercode wordpress plugin for google maps – wp maps (formerly wp google map plugin), weplugins wp maps +1 more WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-28172 5.4 MediumNovember 12, 2023
• flippercode custom css-js-php, wpfactory custom css\, js \& php +1 more Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypass CVE-2021-4418 4.3 MediumOctober 20, 2023
• flippercode wp security question, wp-security-questions +1 more WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass CVE-2021-4386 4.3 MediumJuly 1, 2023
• flippercode wordpress plugin for google maps – wp maps, weplugins wp maps +1 more WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23878 5.9 MediumApril 4, 2023
• fedoraproject fedora, flippercode wp google map plugin (wordpress plugin), weplugins wp maps +2 more WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-25600 5.4 MediumMarch 11, 2022
• akbrohi wp google map plugin, flippercode wp google map +1 more Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress... CVE-2018-0577 5.4 MediumMay 14, 2018