Lucene search
+L

138 matches found

Patchstack
Patchstack
added 2025/01/24 11:47 a.m.13 views

WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan in WordPress Plugin WP Go Maps versions = 9.0.40...

8.8CVSS7AI score0.00186EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/06/14 7:15 a.m.9 views

CVE-2024-5994

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom JS option in versions up to, and including, 9.0.38. This makes it possible for authenticated attackers that have been explicitly granted permissions by an administrator, with...

5.4CVSS5.9AI score0.00367EPSS
SaveExploits0References3
NVD
NVD
added 2024/06/14 7:15 a.m.40 views

CVE-2024-5994

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom JS option in versions up to, and including, 9.0.38. This makes it possible for authenticated attackers that have been explicitly granted permissions by an administrator, with...

6.4CVSS0.00367EPSS
SaveExploits0References3
CVE
CVE
added 2024/06/14 6:53 a.m.72 views

CVE-2024-5994

CVE-2024-5994 affects the WP Go Maps (formerly WP Google Maps) WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) via the Custom JS option in versions up to 9.0.38. It allows authenticated users with contributor-level permissions and above (granted by an administrator) to ...

6.4CVSS6.1AI score0.00367EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/06/14 3:09 a.m.10 views

Wordpress WP Go Maps plugin <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Tim Coen in WordPress Plugin WP Go Maps versions = 9.0.38...

5.8AI score
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/06/14 12:00 a.m.13 views

WordPress plugin WP Go Maps security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS6.1AI score0.00367EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/06/14 12:00 a.m.15 views

PT-2024-37299 · WordPress · Wp Go Maps

Name of the Vulnerable Software and Affected Versions: WP Go Maps plugin for WordPress versions up to, and including, 9.0.38 Description: The issue allows authenticated attackers with contributor-level permissions and above to inject arbitrary web scripts in pages via the Custom JS option. This...

6.4CVSS7.2AI score0.00367EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2024/06/13 12:16 p.m.9 views

WordPress WP Go Maps plugin <= 9.0.38 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Tim Coen in WordPress Plugin WP Go Maps versions = 9.0.38...

6.4CVSS5.8AI score0.00367EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/05/24 6:32 a.m.16 views

WordPress WP Go Maps (formerly WP Google Maps) plugin <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Thanh Nam Tran in WordPress Plugin WP Go Maps versions = 9.0.36...

6.4CVSS5.8AI score0.00322EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/05/24 5:15 a.m.9 views

CVE-2024-3557

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpgmza shortcode in all versions up to, and including, 9.0.36 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

5.4CVSS5.9AI score0.00322EPSS
SaveExploits0References3
NVD
NVD
added 2024/05/24 5:15 a.m.33 views

CVE-2024-3557

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpgmza shortcode in all versions up to, and including, 9.0.36 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

6.4CVSS5.9AI score0.00322EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/05/24 4:29 a.m.44 views

CVE-2024-3557 WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpgmza shortcode in all versions up to, and including, 9.0.36 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

6.4CVSS5.9AI score0.00322EPSS
SaveExploits0References3
CVE
CVE
added 2024/05/24 4:29 a.m.88 views

CVE-2024-3557

CVE-2024-3557 refers to a Stored Cross-Site Scripting vulnerability in the WordPress plugin WP Go Maps (formerly WP Google Maps) . The weakness is due to insufficient input sanitization and output escaping on user-supplied attributes used by the plugin shortcode wpgmza, affecting versions up to a...

6.4CVSS5.8AI score0.00322EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/24 12:00 a.m.17 views

PT-2024-26550 · WordPress · Wp Go Maps

Name of the Vulnerable Software and Affected Versions: WP Go Maps plugin for WordPress versions up to, and including, 9.0.36 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's wpgmza shortcode. This allows authenticat...

6.4CVSS6.9AI score0.00322EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/05/24 12:00 a.m.11 views

WordPress plugin WP Go Maps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS5.9AI score0.00322EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/04/11 1:20 p.m.14 views

WordPress WP Go Maps (formerly WP Google Maps) plugin <= 9.0.34 - Information Exposure to Potential Denial of Service vulnerability

Information Exposure to Potential Denial of Service vulnerability discovered by WordFence in WordPress Plugin WP Go Maps versions = 9.0.34...

6.5CVSS6.9AI score0.00795EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/09 6:58 p.m.21 views

CVE-2023-6777 WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 9.0.34 due to the plugin adding the API key to several plugin files. This makes it possible for unauthenticated attackers to obtain the developer's...

5.3CVSS7.2AI score0.00795EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/09 12:00 a.m.9 views

WordPress Plugin WP Go Maps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS8.8AI score0.00795EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.15 views

PT-2024-15080 · WordPress · Wp Go Maps

Name of the Vulnerable Software and Affected Versions: WP Go Maps plugin for WordPress versions up to, and including, 9.0.34 Description: The issue allows unauthenticated attackers to obtain the developer's Google API key due to the plugin adding the API key to several plugin files. This does not...

6.5CVSS9.5AI score0.00795EPSS
SaveExploits0References7
NVD
NVD
added 2024/03/27 10:15 a.m.26 views

CVE-2024-29931

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPGMaps WP Go Maps wp-google-maps.This issue affects WP Go Maps: from n/a through = 9.0.29...

7.1CVSS6.9AI score0.00753EPSS
SaveExploits0References2
Rows per page
Query Builder