Flippercode
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters | 5 | – | Apr 16, 2026 |
| WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings | 2 | – | Sep 25, 2026 |
| Text Prompter – Unlimited chatgpt text prompts for openai tasks | 1 | – | Dec 24, 2024 |
| WordPress Plugin for Google Maps – WP MAPS | 1 | – | Apr 4, 2023 |
| WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) | 1 | – | Nov 12, 2023 |
| WP Google Map Plugin (WordPress plugin) | 1 | – | Mar 11, 2022 |
| WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters | 1 | – | Jun 6, 2026 |
| WP Maps Pro | 1 | – | May 29, 2026 |
| Advanced Google Maps | 1 | – | Nov 6, 2025 |
| WP Security Question | 1 | – | Jul 1, 2023 |
| Custom css-js-php | 1 | – | Oct 20, 2023 |
Exploited and recent CVEs
- CVE-2026-13179 WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter 0.3%
- CVE-2026-13456 WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter 0.8%
- CVE-2026-9594 WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter 0.3%
- CVE-2026-8732 WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action 20.4%
- CVE-2025-13364 WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode 0.3%
- CVE-2026-2580 WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter 0.5%
- CVE-2026-3222 WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameter 0.5%
- CVE-2025-12062 WP Maps <= 4.8.6 - Authenticated (Subscriber+) Limited Local File Inclusion 0.8%
- CVE-2025-39465 WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability 0.2%
- CVE-2024-11896 Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-2386 WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection 0.5%
- CVE-2023-28172 WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2021-4418 Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypass 0.5%
- CVE-2021-4386 WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass 0.4%
- CVE-2023-23878 WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-25600 WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability 0.6%