High
CVE-2026-84780
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 32
Reset filters
High
CVE-2026-15381
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map < 10.1.04 - Unauthenticated SQL Injection
Medium
CVE-2026-25466
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map <= 10.1.05 - Missing Authorization
High
CVE-2026-57767
WP Google Maps Pro <= 10.1.02 - Unauthenticated Stored Cross-Site Scripting
The WP Google Maps Pro plugin for WordPress is vulnerable to stored cross-site scripting due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts into pages.
Medium
CVE-2026-12238
WP Go Maps <= 10.1.01 - Unauthenticated Arbitrary Record Creation
Medium
CVE-2026-8385
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback
Medium
CVE-2026-8386
Go Maps <= 10.0.9 - Unauthenticated Information Exposure
Medium
CVE-2026-7464
WP Google Maps Integration <= 1.2 - Reflected Cross-Site Scripting via 'page' Parameter
Medium
CVE-2026-4268
WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings
Medium
CVE-2026-0593
WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification
High
CVE-2025-11307
Google Maps <= 9.0.47 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-11703
WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning
Medium
CVE-2025-11166
WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2025-24742
WP Go Maps <= 9.0.40 - Cross-Site Request Forgery
Medium
CVE-2024-5994
WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3557
WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-29931
WP Google Maps <= 9.0.29 - Reflected Cross-Site Scripting
Medium
CVE-2023-6777
WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service
Medium
CVE-2024-1582
WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4839
WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6697
WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting
Medium
CVE-2023-6627
WP Google Maps <= 9.0.27 - Unauthenticated Stored Cross-Site Scripting via REST API
Medium
CVE-2022-47595
WP Go Maps <= 9.0.15 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2021-36870
WP Google Maps <= 8.1.12 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.