CVE-2026-13335

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-13335 CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-13335 CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress CodePeople Post Map for Google Maps plugin <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting vulnerability

Authenticated Contributor + Stored Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Google Maps CP versions = 1.2.6...

CVE-2017-18557

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

CVE-2025-39465

Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through = 5.8.4...

EUVD-2021-25707

Malware in sbrugna...

EUVD-2023-27947

Malicious code in bioql PyPI...

EUVD-2023-26827

Malicious code in bioql PyPI...

EUVD-2023-50433

Malicious code in bioql PyPI...

EUVD-2024-33214

Malicious code in bioql PyPI...

EUVD-2023-34006

Malicious code in bioql PyPI...

EUVD-2023-57466

Malicious code in bioql PyPI...

EUVD-2022-34685

Malicious code in bioql PyPI...

EUVD-2023-57638

Malicious code in bioql PyPI...

EUVD-2023-31880

Malicious code in bioql PyPI...

EUVD-2024-46459

Malicious code in bioql PyPI...

EUVD-2022-33791

Malicious code in bioql PyPI...

EUVD-2023-54726

Malicious code in bioql PyPI...

CVE-2025-9352: Improper Neutralization of Input During Web Page Generation

The Pronamic Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...