Lucene search
K

CVE-2023-6627

🗓️ 08 Jan 2024 19:00:30Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 104 Views🌐 WEB

The WP Go Maps WordPress plugin before 9.0.28 allows storing malicious HTML/Javascript

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2023-6627
25 Jan 202415:42
circl
CNNVD
WordPress Plugin WP Go Maps Security Vulnerability
8 Jan 202400:00
cnnvd
Cvelist
CVE-2023-6627 WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
8 Jan 202419:00
cvelist
EUVD
EUVD-2023-58850
3 Oct 202520:07
euvd
NVD
CVE-2023-6627
8 Jan 202419:15
nvd
OpenVAS
WordPress WP Google Maps Plugin < 9.0.28 XSS Vulnerability
10 Jan 202400:00
openvas
OSV
CVE-2023-6627
8 Jan 202419:15
osv
Patchstack
WordPress WP Go Maps Plugin < 9.0.28 is vulnerable to Cross Site Scripting (XSS)
18 Dec 202300:00
patchstack
Prion
Design/Logic Flaw
8 Jan 202419:15
prion
Positive Technologies
PT-2024-15030 · WordPress · Wp Go Maps
8 Jan 202400:00
ptsecurity
Rows per page
NVD
Vulners
Node
codecabinwp_go_mapsRange<9.0.28basicwordpress
[
  {
    "vendor": "Unknown",
    "product": "WP Go Maps (formerly WP Google Maps)",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "9.0.28"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]
ParameterPositionPathDescriptionCWE
addressbodywp-json/wpgmzA/v1/markersREST API route that can be abused to store XSS payload on the site via POST with _method=get and random parameterCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

18 Jun 2025 17:15Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.16.1
EPSS0.01157
SSVC
104