EUVD-2026-102795

The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the setstatus and bulk functions in the MapsController REST controller in versions up to, and including, 3.0.0. The plugin's permissioncallback canedit only verifies...

WordPress WP Map Block plugin <= 1.2.2 - Stored Cross-Site Scripting (XSS) vulnerabilities

Stored Cross-Site Scripting XSS vulnerabilities discovered by apple502j in WordPress WP Map Block plugin versions = 1.2.2. Solution Update the WordPress WP Map Block plugin to the latest available version at least 1.2.3...