Lucene search
+L

366 matches found

Kitploit
Kitploit
added 2026/09/14 4:35 a.m.20 views

CVE-2026-8732-POC

CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Auto Admin Creator 📌 Description This tool exploits CVE-2026-8732 , a vulnerability in the WP Google Map Pro plugin for WordPress. The vulnerability allows an unauthenticated attacker to obtain a valid wpmptoken via an AJAX endpoint...

9.8CVSS6.2AI score0.22728EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/14 1:33 a.m.5 views

CVE-2026-8732

CVE-2026-8732 - Escáner Masivo y Creador Automático de Administradores de WordPress WP Google Map Pro 📌 Descripción Esta herramienta explota CVE-2026-8732 , una vulnerabilidad en el plugin WP Google Map Pro para WordPress. La vulnerabilidad permite a un atacante no autenticado obtener un wpmptoke...

9.8CVSS6.3AI score0.22728EPSS
SaveExploits8References1
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.15 views

WordPress Google Map Professional - Cross-Site Scripting

WordPress Google Map Professional Map In Your Language plugin through 1.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such ...

6.1CVSS7.9AI score0.00581EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.107 views

WordPress AB Google Map Travel <=3.4 - Stored Cross-Site Scripting

WordPress AB Google Map Travel plugin through 3.4 contains multiple stored cross-site scripting vulnerabilities. The plugin allows an attacker to hijack the administrator authentication for requests via the 1 lat Latitude, 2 long Longitude, 3 mapwidth, 4 mapheight, or 5 zoom Map Zoom parameters i...

6.8CVSS5.7AI score0.03831EPSS
SaveExploits2References5
Kitploit
Kitploit
added 2026/09/13 2:05 a.m.5 views

joomla-cve-2018-6396

Joomla-CVE-2018-6396 Componente Joomla! Google Map Landkarten = 4.2.3 - Inyección SQL Fecha: 03/03/2018 Página del proveedor: http://www.joomla-24.de/ Enlace del software: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/ Versión: = 4.2.3...

9.8CVSS8.2AI score0.23561EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2026/06/01 9:06 a.m.201 views

Exploit for CVE-2026-8732

CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Aut...

9.8CVSS6.2AI score0.22728EPSS
SaveExploits8
RedhatCVE
RedhatCVE
added 2026/02/15 7:10 a.m.22 views

CVE-2026-1096

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS5.8AI score0.00255EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/14 7:16 a.m.17 views

CVE-2026-1096

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS0.00255EPSS
SaveExploits0References4
CVE
CVE
added 2026/02/14 6:42 a.m.39 views

CVE-2026-1096

CVE-2026-1096 affects the Best-wp-google-map WordPress plugin (versions

6.4CVSS5.7AI score0.00255EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/02/14 6:42 a.m.43 views

CVE-2026-1096 Best-wp-google-map <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'latitude' Shortcode Attribute

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS0.00255EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/14 6:42 a.m.9 views

CVE-2026-1096

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS5.7AI score0.00255EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/02/14 6:42 a.m.6 views

CVE-2026-1096 Best-wp-google-map <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'latitude' Shortcode Attribute

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS5.7AI score0.00255EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/14 12:00 a.m.22 views

PT-2026-8070

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'google map view' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible...

6.4CVSS5.7AI score0.00255EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/02/14 12:00 a.m.23 views

WordPress plugin Best-wp-google-map 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00255EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/02/13 11:00 p.m.9 views

WordPress Best-wp-google-map plugin <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'latitude' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'latitude' Shortcode Attribute vulnerability discovered by theviper17y in WordPress Plugin Best-wp-google-map versions = 2.1...

6.4CVSS5.4AI score0.00255EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 11:12 a.m.15 views

CVE-2016-10878

The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS...

6.1CVSS7.1AI score0.00978EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:47 a.m.11 views

CVE-2025-23466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00357EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.13 views

WordPress CBX Map for Google Map & OpenStreetMap plugin <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin CBX Map for Google Map & OpenStreetMap versions = 2.0.1...

6.4CVSS5.9AI score0.00231EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.12 views

WordPress WP Google Map plugin < 1.9.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin WP Google Map versions 1.9.4...

4.3CVSS5.9AI score0.00323EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/12 3:21 a.m.6 views

CVE-2025-13850 LS Google Map Router <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The LS Google Map Router plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'maptype' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS4.7AI score0.00216EPSS
SaveExploits0References3
Rows per page
Query Builder