3411 matches found
CVE-2025-2162: Improper Neutralization of Input During Web Page Generation
The MapPress Maps for WordPress plugin before 2.94.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2025-39424
Cross-Site Request Forgery CSRF vulnerability in simplemaps Simple Maps interactive-maps allows Stored XSS.This issue affects Simple Maps: from n/a through = 0.98...
CVE-2025-27313
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bernd Altmeier Google Maps GPX Viewer google-maps-gpx-viewer allows Reflected XSS.This issue affects Google Maps GPX Viewer: from n/a through = 3.6...
CVE-2025-27313
CVE-2025-27313 affects Google Maps GPX Viewer (WordPress plugin) up to version 3.6. Root cause: improper input neutralization during web page generation, leading to a reflected XSS vulnerability. Public references in multiple feeds confirm the issue as a reflected XSS with affected software and v...
CVE-2025-27313 WordPress Google Maps GPX Viewer Plugin <= 3.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bernd Altmeier Google Maps GPX Viewer google-maps-gpx-viewer allows Reflected XSS.This issue affects Google Maps GPX Viewer: from n/a through = 3.6...
CVE-2025-27313 WordPress Google Maps GPX Viewer Plugin <= 3.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bernd Altmeier Google Maps GPX Viewer google-maps-gpx-viewer allows Reflected XSS.This issue affects Google Maps GPX Viewer: from n/a through = 3.6...
CVE-2025-39424
CVE-2025-39424 concerns the WordPress Simple Maps plugin (versions 0.98 and earlier). The entries describe a CSRF flaw that enables stored XSS, affecting Simple Maps up to 0.98. Connected sources confirm the same vulnerability name and impact; no explicit patch version or official fix is provided...
CVE-2025-39424 WordPress Simple Maps plugin <= 0.98 - CSRF to XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in simplemaps Simple Maps interactive-maps allows Stored XSS.This issue affects Simple Maps: from n/a through = 0.98...
WordPress Simple Maps plugin <= 0.98 - CSRF to XSS vulnerability
CSRF to XSS vulnerability discovered by johska Patchstack Alliance in WordPress Plugin Simple Maps versions = 0.98...
WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Anhchangmutrang Patchstack Alliance in WordPress Plugin Advanced Google Maps versions = 5.8.4...
PT-2025-45192
Name of the Vulnerable Software and Affected Versions Advanced Google Maps versions prior to 5.8.5 Description The wp-google-map-gold plugin for WordPress contains a missing authorization flaw resulting from an incorrectly configured access control security level. This occurs due to a missing...
PT-2025-16991 · Unknown · Simplegmaps
Name of the Vulnerable Software and Affected Versions: Simple Maps versions 0.98 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...
CVE-2025-39424: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in simplemaps Simple Maps interactive-maps allows Stored XSS.This issue affects Simple Maps: from n/a through = 0.98...
CVE-2025-32682: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through = 8.6.4...
CVE-2025-27313: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bernd Altmeier Google Maps GPX Viewer google-maps-gpx-viewer allows Reflected XSS.This issue affects Google Maps GPX Viewer: from n/a through = 3.6...
WordPress plugin Simple Maps 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
WordPress plugin Google Maps GPX Viewer 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-3737
Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator:...