codecabin records

18 published records for vendor codecabin.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 1 · 5.6%
Pre-auth RCE: 0
With a fix record: 22.2%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

18 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
63This week	CVE-2019-10692Weaponized	In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before codecabin · wp go maps · CWE-89 Pre-auth SQL injection	Critical9.8	—	78.7%	Apr 2, 2019
35Monitor	CVE-2025-24742No exploit	WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerabilitycodecabin · wp go maps · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Jan 27, 2025
26Monitor	CVE-2023-6777No exploit	WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Servicecodecabin · wp go maps · CWE-200 Pre-auth Info leak	Medium6.5	—	0.8%	Apr 9, 2024
26Monitor	CVE-2022-47595No exploit	WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversalcodecabin · wp go maps · CWE-22 Path traversal	Medium6.5	—	0.8%	Mar 14, 2023
25Monitor	CVE-2019-9912Proof of concept	The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO.codecabin · wp go maps · CWE-79 Pre-auth XSS	Medium6.1	—	3.2%	Mar 21, 2019
24Monitor	CVE-2024-29931Proof of concept	WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerabilitycodecabin · wp go maps · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Mar 27, 2024
24Monitor	CVE-2024-13628Proof of concept	WP Pricing Table <= 1.1 - Reflected XSScodecabin · wp pricing table · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Feb 26, 2025
24Monitor	CVE-2023-6627No exploit	WP Go Maps < 9.0.28 - Unauthenticated Stored XSScodecabin · wp go maps · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Jan 8, 2024
22Monitor	CVE-2021-24383Proof of concept	WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)codecabin · wp go maps · CWE-79 XSS	Medium5.4	—	2.5%	Jun 21, 2021
21Monitor	CVE-2019-14792No exploit	The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.codecabin · wp go maps · CWE-79 XSS	Medium5.4	—	1.1%	Aug 9, 2019
21Monitor	CVE-2021-36870No exploit	WordPress WP Google Maps plugin <= 8.1.12 - Multiple Authenticated Persistent XSS vulnerabilitiescodecabin · wp go maps · CWE-79 XSS	Medium5.4	—	0.6%	Sep 9, 2021
21Monitor	CVE-2021-36871No exploit	WordPress WP Google Maps Pro premium plugin <= 8.1.11 - Multiple Authenticated Persistent XSS vulnerabilitiescodecabin · wp go maps · CWE-79 XSS	Medium5.4	—	0.6%	Sep 9, 2021
21Monitor	CVE-2024-5994No exploit	WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scriptingcodecabin · wp go maps · CWE-79 XSS	Medium5.4	—	0.4%	Jun 14, 2024
21Monitor	CVE-2024-9127No exploit	Super Testimonials <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parametercodecabin · super testimonials · CWE-79 XSS	Medium5.4	—	0.3%	Sep 26, 2024
21Monitor	CVE-2024-3557No exploit	WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecodecabin · wp go maps · CWE-79 XSS	Medium5.4	—	0.3%	May 24, 2024
21Monitor	CVE-2024-1582No exploit	WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecodecabin · wp go maps · CWE-79 XSS	Medium5.4	—	0.3%	Mar 12, 2024
19Monitor	CVE-2023-4839No exploit	WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scriptingcodecabin · wp go maps · CWE-79 XSS	Medium4.8	—	0.3%	Mar 12, 2024
18Monitor	CVE-2014-7182No exploit	Multiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to injeccodecabin · wp go maps · CWE-79 Pre-auth XSS	Medium4.3	—	2.5%	Oct 22, 2014

CVE-2019-10692
63This week
In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before
CriticalCVSS 9.8WeaponizedEPSS 79%
- Pre-auth
- SQL injection
codecabin · wp go mapsApr 2, 2019
CVE-2025-24742
35Monitor
WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
codecabin · wp go mapsJan 27, 2025
CVE-2023-6777
26Monitor
WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Info leak
codecabin · wp go mapsApr 9, 2024
CVE-2022-47595
26Monitor
WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversal
MediumCVSS 6.5No exploitEPSS 1%
- Path traversal
codecabin · wp go mapsMar 14, 2023
CVE-2019-9912
25Monitor
The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO.
MediumCVSS 6.1Proof of conceptEPSS 3%
- Pre-auth
- XSS
codecabin · wp go mapsMar 21, 2019
CVE-2024-29931
24Monitor
WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
codecabin · wp go mapsMar 27, 2024
CVE-2024-13628
24Monitor
WP Pricing Table <= 1.1 - Reflected XSS
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
codecabin · wp pricing tableFeb 26, 2025
CVE-2023-6627
24Monitor
WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
codecabin · wp go mapsJan 8, 2024
CVE-2021-24383
22Monitor
WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)
MediumCVSS 5.4Proof of conceptEPSS 2%
- XSS
codecabin · wp go mapsJun 21, 2021
CVE-2019-14792
21Monitor
The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.
MediumCVSS 5.4No exploitEPSS 1%
- XSS
codecabin · wp go mapsAug 9, 2019
CVE-2021-36870
21Monitor
WordPress WP Google Maps plugin <= 8.1.12 - Multiple Authenticated Persistent XSS vulnerabilities
MediumCVSS 5.4No exploitEPSS 1%
- XSS
codecabin · wp go mapsSep 9, 2021
CVE-2021-36871
21Monitor
WordPress WP Google Maps Pro premium plugin <= 8.1.11 - Multiple Authenticated Persistent XSS vulnerabilities
MediumCVSS 5.4No exploitEPSS 1%
- XSS
codecabin · wp go mapsSep 9, 2021
CVE-2024-5994
21Monitor
WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codecabin · wp go mapsJun 14, 2024
CVE-2024-9127
21Monitor
Super Testimonials <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codecabin · super testimonialsSep 26, 2024
CVE-2024-3557
21Monitor
WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codecabin · wp go mapsMay 24, 2024
CVE-2024-1582
21Monitor
WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codecabin · wp go mapsMar 12, 2024
CVE-2023-4839
19Monitor
WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 0%
- XSS
codecabin · wp go mapsMar 12, 2024
CVE-2014-7182
18Monitor
Multiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to injec
MediumCVSS 4.3No exploitEPSS 2%
- Pre-auth
- XSS
codecabin · wp go mapsOct 22, 2014