CVE-2019-14792

🗓️ 09 Aug 2019 12:14:49Reported by mitreType

cve🔗 web.nvd.nist.gov👁 79 Views🌐 WEB

The WP Google Maps plugin for WordPress before 7.11.35 allows XSS via parameters

Reporter	Title	Published	Views	Family All 12
CNVD	WordPress WP Google Maps Plugin Cross-Site Scripting Vulnerability	13 Aug 201900:00	–	cnvd
Cvelist	CVE-2019-14792	9 Aug 201912:14	–	cvelist
EUVD	EUVD-2019-5924	7 Oct 202500:30	–	euvd
Mend	CVE-2019-14792	9 Aug 201912:14	–	mend
NVD	CVE-2019-14792	9 Aug 201913:15	–	nvd
OpenVAS	WordPress Google Maps Plugin < 7.11.35 XSS Vulnerability	14 Aug 201900:00	–	openvas
osv_cve	CVE-2019-14792	9 Aug 201913:15	–	osv_cve
Prion	Design/Logic Flaw	9 Aug 201913:15	–	prion
Positive Technologies	PT-2019-13837 · WordPress · Wp Google Maps	9 Aug 201900:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2019-14792: Improper Neutralization of Input During Web Page Generation	9 Aug 201900:00	–	rapid7

NVD

Node

codecabin wp_go_mapsRange<7.11.35wordpress

Source	Link
wordpress	www.wordpress.org/plugins/wp-google-maps/
wpvulndb	www.wpvulndb.com/vulnerabilities/9442
pluginvulnerabilities	www.pluginvulnerabilities.com/2019/07/08/recently-closed-wordpress-plugin-with-400000-installs-contains-another-authenticated-persistent-xss-vulnerability/

Parameter	Position	Path	Description	CWE
rectangle_name	query param	/wp-admin/rectangle_name	XSS via the rectangle_name parameter in the WP Google Maps plugin.	CWE-79
rectangle_opacity	query param	/wp-admin/rectangle_opacity	XSS via the rectangle_opacity parameter in the WP Google Maps plugin.	CWE-79

17 Jun 2026 02:19Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 35.4

EPSS0.01063