Skip to content
Unknown Maps vulnerabilities
-
mapster wp maps, unknown mapster wp maps +1 more
Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route
CVE-2026-118638
7.5 High
-
supsystic ultimate maps by supsystic
WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability
CVE-2026-102397
6.5 Medium
-
supsystic ultimate maps by supsystic
WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102396
7.1 High
-
supsystic ultimate maps by supsystic
WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerability
CVE-2026-85309
5.3 Medium
-
unknown wp maps
WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation
CVE-2026-18466
5.4 Medium
-
supsystic ultimate maps by supsystic
WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability
CVE-2026-73377
7.5 High
-
supsystic ultimate maps by supsystic
WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability
CVE-2026-73376
9.8 Critical
-
supsystic ultimate maps by supsystic
WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73375
7.1 High
-
flippercode wp maps pro
WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion
CVE-2026-18465
6.5 Medium
-
flippercode wp maps pro
WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service
CVE-2026-18464
Public exploit
7.5 High
-
unknown wp maps
WP Maps < 4.9.7 - Subscriber+ Denial of Service
CVE-2026-16265
Public exploit
6.5 Medium
-
unknown wp maps
WP Maps < 4.9.7 - Subscriber+ Local File Inclusion
CVE-2026-16263
8.8 High
-
unknown google-maps-easy-pro, supsystic-gallery-pro, tables-generator-pro +2 more
Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
CVE-2026-17032
9.8 Critical
-
mapster wp maps, unknown mapster wp maps +1 more
Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure
CVE-2026-14839
7.5 High
-
unknown wp go maps, wp go maps (formerly wp google maps) go maps +1 more
WP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filter
CVE-2026-15381
3.7 Low
-
chrisvrichardson mappress maps for wordpress
WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability
CVE-2026-65564
5.3 Medium
-
professionalwiki maps
mediawiki/maps: Stored XSS through the overlays parameter in the display_map parser function
CVE-2026-52854
Fix available
8.6 High
-
chrisvrichardson mappress maps for wordpress
WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56011
Public exploit
7.1 High
-
flippercode wp maps pro
Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation
CVE-2026-8935
9.8 Critical
-
unknown wp go maps, wp go maps (formerly wp google maps) go maps +1 more
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID
CVE-2026-8386
5.3 Medium
-
unknown wp go maps, wp go maps (formerly wp google maps) go maps +1 more
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback
CVE-2026-8385
5.3 Medium
-
chrisvrichardson mappress maps for wordpress
MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints
CVE-2026-8839
5.3 Medium
-
unknown wp maps
WP Maps < 4.9.3 - Subscriber+ Local File Inclusion
CVE-2026-6381
7.5 High
-
unknown yamaps for wordpress plugin
YaMaps < 0.6.40 - Contributor+ Stored XSS
CVE-2025-13958
5.9 Medium
-
unknown wp go maps (formerly wp google maps)
WP Google Maps < 9.0.48 - Unauthenticated Stored XSS
CVE-2025-11307
8.8 High
-
mappresspro mappress, unknown mappress maps for wordpress +1 more
MapPress Maps for WordPress < 2.93 - Admin+ Stored XSS via Map Settings
CVE-2024-8620
4.8 Medium
-
unknown wp maps
WP Maps < 4.7.2 - Admin+ Stored XSS
CVE-2025-3504
4.8 Medium
-
unknown wp maps
WP Maps < 4.7.2 - Admin+ Stored XSS
CVE-2025-3503
4.8 Medium
-
unknown wp maps
WP Maps < 4.7.2 - Admin+ Stored XSS
CVE-2025-3502
4.8 Medium
-
mappresspro mappress, unknown mappress maps for wordpress +1 more
MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS
CVE-2025-2162
4.8 Medium
-
robosoft maps
Maps - Google Maps <= 1.0.6 - Contributor+ Stored XSS
CVE-2025-2279
5.9 Medium
-
mappresspro mappress, unknown mappress maps for wordpress +1 more
MapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSS
CVE-2025-2055
6.8 Medium
-
unknown maps plugin using google maps for wordpress, wpgooglemap wp google map +1 more
WP Google Map < 1.9.4 - Admin+ Stored XSS
CVE-2024-13306
4.3 Medium
-
unknown maps plugin using google maps for wordpress, wpgooglemap wp google map +1 more
WP Google Map < 1.9.4 - Admin+ Stored XSS
CVE-2024-13208
4.3 Medium
-
chrisvrichardson mappress maps for wordpress, mappresspro mappress +1 more
MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block
CVE-2024-10715
6.4 Medium
-
paidmembershipspro maps, strangerstudios paid memberships pro, unknown pmpro-membership-maps +2 more
Paid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information Disclosure
CVE-2024-1286
4.9 Medium
-
harmr leaflet maps marker (google maps, openstreetmap, bing maps), wordpress leaflet maps marker +1 more
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) <= 3.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-3670
6.4 Medium
-
supsystic ultimate maps by supsystic
WordPress Ultimate Maps plugin <= 1.2.16 - Cross Site Request Forgery vulnerability
CVE-2024-31271
4.3 Medium
-
mappresspro mappress maps, mappress maps for wordpress +1 more
MapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSS
CVE-2024-0420
5.4 Medium
-
mappresspro mappress maps for wordpress
MapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosure
CVE-2024-0421
5.3 Medium
-
chrisvrichardson mappress maps for wordpress, mappresspro mappress +1 more
MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings
CVE-2023-7225
6.4 Medium
-
supsystic ultimate maps, unknown ultimate maps by supsystic +1 more
Ultimate Maps by Supsystic < 1.2.16 - Admin+ Stored XSS
CVE-2023-6732
4.8 Medium
-
qoders upqode google maps
UpQode Google Maps <= 1.0.5 - Contributor+ Stored XSS
CVE-2023-0094
5.4 Medium
-
codecabin wp go maps, unknown wp go maps (formerly wp google maps) +1 more
WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
CVE-2023-6627
6.1 Medium
-
chrisvrichardson mappress maps for wordpress, mappresspro mappress +1 more
MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-6524
6.4 Medium
-
chris richardson mappress maps for wordpress, mappresspro mappress +1 more
WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection
CVE-2023-26015
7.1 High
-
chrisvrichardson mappress maps for wordpress, mappresspro mappress +1 more
MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-4840
6.4 Medium
-
10web map builder for google maps, unknown 10web map builder for google maps +1 more
10WebMapBuilder < 1.0.73 - Unauthenticated SQLi
CVE-2023-0037
9.8 Critical
-
unknown yamaps for wordpress plugin, yamaps project yamaps +1 more
YaMaps for WordPress Plugin < 0.6.26 - Contributor+ Stored XSS
CVE-2023-0270
5.4 Medium
-
mapsmarker leaflet maps marker, unknown leaflet maps marker (google maps, openstreetmap, bing maps) +1 more
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.7 - Contributor+ Stored XSS via Shortcode
CVE-2022-4677
5.4 Medium
- Show olderLoading…