Weplugins

13 CVEs across 1 Weplugins products. Browse Weplugins vulnerabilities, severities, and proof-of-concept exploits.

Weplugins products with known CVEs

ProductCVEs
Wp Maps13
Weplugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-3504Medium4.82025-05-01The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perfo…
CVE-2025-3503Medium4.82025-05-01The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perfo…
CVE-2025-3502Medium4.82025-05-01The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perfo…
CVE-2023-28172Medium5.42023-11-12Cross-Site Request Forgery (CSRF) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) plugin <= 4.4.2 versi…
CVE-2023-23878Medium5.92023-04-04Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin <= 4.3.9 versions.
CVE-2022-25600Medium5.42022-03-11Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <= 4.2.3…
CVE-2021-24502Medium4.82021-08-09The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scr…
CVE-2021-24130High7.22021-03-18Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable t…
CVE-2015-9309High8.82019-08-14The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature.
CVE-2015-9308High8.82019-08-14The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.
CVE-2015-9307High8.82019-08-14The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature.
CVE-2016-10878Medium6.12019-08-12The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS.
CVE-2015-9305Medium6.12019-08-12The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions.