WP Go Maps – Google Map, OpenStreetMap, Leaflet Map

Уязвимости

• CVE-2019-10692без авторизации

  In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before

  Критич. 9.8

• CVE-2025-24742без авторизации · нужен клик≤ 9.0.40

  WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability

  Высокий 8.8

• CVE-2023-6777без авторизации≤ 9.0.34

  WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service

  Средний 6.5

• CVE-2022-47595высокие права≤ 9.0.15

  WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversal

  Средний 6.5

• CVE-2026-4268подписчик+≤ 10.0.05

  WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_se

  Средний 6.4

• CVE-2024-29931без авторизации · нужен клик≤ 9.0.29

  WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2023-6697без авторизации · нужен клик≤ 9.0.28

  WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2025-11166без авторизации · нужен клик≤ 9.0.46

  WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update

  Средний 5.4

• CVE-2019-14792нужен вход

  The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.

  Средний 5.4

• CVE-2024-5994участник+≤ 9.0.38

  WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-3557участник+≤ 9.0.36

  WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 5.4

• CVE-2024-1582участник+≤ 9.0.32

  WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 5.4

• CVE-2021-36870высокие права≤ 8.1.12

  WordPress WP Google Maps plugin <= 8.1.12 - Multiple Authenticated Persistent XSS vulnerabilities

  Средний 5.4

• CVE-2026-84780без авторизации≤ 10.1.08

  WordPress WP Go Maps plugin <= 10.1.08 - Denial of Service Attack vulnerability

  Средний 5.3

• CVE-2026-25466без авторизации≤ 10.1.04

  WordPress WP Go Maps plugin <= 10.1.04 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-12238без авторизации≤ 10.1.01

  WP Go Maps <= 10.1.01 - Unauthenticated Arbitrary Record Creation

  Средний 5.3

• CVE-2025-11703без авторизации≤ 9.0.48

  WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning

  Средний 5.3

• CVE-2026-0593подписчик+≤ 10.0.04

  WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification

  Средний 5.3

• CVE-2023-4839админ≤ 9.0.32

  WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2014-7182

  Multiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to injec

  Средний 4.3