Log in Start free

WPGMaps

Products

ProductCVEsExploitedLatest
WP Go Maps (formerly WP Google Maps)10–Mar 18, 2026
WP Go Maps4–Sep 2, 2026
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map1–Jun 19, 2026

Exploited and recent CVEs

  • CVE-2026-84780 Medium 5.3 WordPress WP Go Maps plugin <= 10.1.08 - Denial of Service Attack vulnerability 0.4%
  • CVE-2026-25466 Medium 5.3 WordPress WP Go Maps plugin <= 10.1.04 - Broken Access Control vulnerability 0.3%
  • CVE-2026-12238 Medium 5.3 WP Go Maps <= 10.1.01 - Unauthenticated Arbitrary Record Creation 0.4%
  • CVE-2026-4268 Medium 6.4 WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings 0.2%
  • CVE-2026-0593 Medium 5.3 WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification 0.3%
  • CVE-2025-11703 Medium 5.3 WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning 0.2%
  • CVE-2025-11166 Medium 5.4 WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update 0.2%
  • CVE-2025-24742 Medium 4.3 WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-5994 Medium 6.4 WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-3557 Medium 6.4 WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2023-6777 Medium 5.3 WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service 0.8%
  • CVE-2024-29931 High 7.1 WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability 0.8%
  • CVE-2024-1582 Medium 6.4 WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2023-4839 Medium 4.4 WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-6697 Medium 6.1 WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting 1.0%