Medium
CVE-2026-13179
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 31
Reset filters
High
CVE-2026-13456
WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter
Medium
CVE-2026-66618
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters <= 4.9.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-18466
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 4.9.8 - Missing Authorization
Medium
CVE-2026-16265
Maps <= 4.9.6 - Authenticated (Subscriber+) Denial of Service
Medium
CVE-2026-28144
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters <= 4.9.6 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-6381
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 4.9.3 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2026-9594
WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter
Medium
CVE-2025-13364
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode
High
CVE-2026-39492
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection
High
CVE-2026-2580
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter
High
CVE-2026-3222
WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameter
High
CVE-2025-12062
WP Maps <= 4.8.6 - Authenticated (Subscriber+) Limited Local File Inclusion
Medium
CVE-2025-67535
Maps <= 4.8.6 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-3503
WP Maps – Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-3502
WP Maps – Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-3504
WP Maps – Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-2386
WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-28172
WP Google Map Plugin <= 4.4.2 - Cross-Site Request Forgery via delete()
Medium
CVE-2023-23878
WP MAPS <= 4.3.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2022-25600
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.2.3 - Cross-Site Request Forgery
High
CVE-2021-24130
WP Google Map Plugin <= 4.1.4 - Authenticated SQL Injection via Orderby
High
a5ba9285-9f41-44dd-83c7-e9c377d9de51
WP Google Map Plugin <= 4.0.9 - Cross-Site Request Forgery to PHP Object Injection
Medium
4186fe8d-ca09-4b82-9500-7b16bd10b044
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.0.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.