WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings

Уязвимости

• CVE-2026-39492без авторизации≤ 4.9.1

  WordPress WP Maps plugin <= 4.9.1 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2023-28172без авторизации · нужен клик≤ 4.4.2

  WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2022-25600без авторизации · нужен клик≤ 4.2.3

  WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability

  Высокий 8.8

• CVE-2015-9309без авторизации · нужен клик

  The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature.

  Высокий 8.8

• CVE-2015-9308без авторизации · нужен клик

  The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.

  Высокий 8.8

• CVE-2015-9307без авторизации · нужен клик

  The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature.

  Высокий 8.8

• CVE-2024-2386участник+≤ 4.6.1

  WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection

  Высокий 8.8

• CVE-2026-66618админ≤ 4.9.9

  WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2026-2580без авторизации≤ 4.9.1

  WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter

  Высокий 7.5

• CVE-2026-3222без авторизации≤ 4.9.1

  WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameter

  Высокий 7.5

• CVE-2026-13456подписчик+≤ 4.9.8

  WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter

  Высокий 7.5

• CVE-2025-67535высокие права≤ 4.8.6

  WordPress WP Maps plugin <= 4.8.6 - PHP Object Injection vulnerability

  Средний 6.6

• CVE-2026-13179подписчик+≤ 4.9.8

  WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter

  Средний 6.4

• CVE-2025-13364участник+≤ 4.8.7

  WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pu

  Средний 6.4

• CVE-2016-10878без авторизации · нужен клик

  The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS.

  Средний 6.1

• CVE-2015-9305без авторизации · нужен клик

  The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions.

  Средний 6.1

• CVE-2018-0577нужен вход

  Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary

  Средний 5.4

• CVE-2023-23878редактор+≤ 4.3.9

  WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2026-9594админ≤ 4.9.4

  WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter

  Средний 4.4

• CVE-2026-28144нужен вход≤ 4.9.6

  WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability

  Средний 4.3