WP Map Plugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Basic Interactive World Map | 2 | – | Apr 16, 2025 |
| Interactive Regional Map of Africa | 1 | – | Jun 6, 2025 |
| Interactive Regional Map of Florida | 1 | – | Jun 6, 2025 |
| Interactive UK Regional Map | 1 | – | Jun 6, 2025 |
| Interactive US Map | 1 | – | Apr 9, 2025 |
Exploited and recent CVEs
- CVE-2025-49441 WordPress Interactive Regional Map of Florida plugin <= 1.0 - Broken Access Control Vulnerability 0.3%
- CVE-2025-49445 WordPress Interactive UK Regional Map plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-49449 WordPress Interactive Regional Map of Africa plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2025-39517 WordPress Basic Interactive World Map plugin <= 2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-32661 WordPress Interactive US Map plugin <= 2.7 - CSRF to Stored XSS vulnerability 0.2%
- CVE-2023-47223 WordPress Basic Interactive World Map Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS) 0.4%