WPGMaps WP Go Maps (formerly WP Google Maps)

• CVE-2026-4268 Medium 6.4 WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings 0.2%
• CVE-2026-0593 Medium 5.3 WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification 0.3%
• CVE-2025-11703 Medium 5.3 WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning 0.2%
• CVE-2025-11166 Medium 5.4 WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update 0.2%
• CVE-2024-5994 Medium 6.4 WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-3557 Medium 6.4 WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2023-6777 Medium 5.3 WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service 0.8%
• CVE-2024-1582 Medium 6.4 WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2023-4839 Medium 4.4 WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
• CVE-2023-6697 Medium 6.1 WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting 1.0%