Lucene search
+L

406 matches found

Kitploit
Kitploit
•added 2026/10/06 1:52 p.m.•11 views

joomla-cve-2018-6396

Joomla-CVE-2018-6396 Joomla! Component Google Map Landkarten PoC cve-2018-6396...

9.8CVSS8.5AI score0.23561EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/10/06 8:04 a.m.•46 views

CVE-2026-8732-POC

CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Auto Admin Creator 📌 Description This tool exploits CVE-2026-8732 , a vulnerability in the WP Google Map Pro plugin for WordPress. The vulnerability allows an unauthenticated attacker to obtain a valid wpmptoken via an AJAX endpoint...

9.8CVSS6.4AI score0.01859EPSS
SaveExploits8
Nuclei
Nuclei
•added 2026/10/06 2:09 a.m.•21 views

WordPress Google Map Professional - Cross-Site Scripting

WordPress Google Map Professional Map In Your Language plugin through 1.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such ...

6.1CVSS7.9AI score0.00581EPSS
SaveExploits1References2
Nuclei
Nuclei
•added 2026/10/06 2:09 a.m.•109 views

WordPress AB Google Map Travel <=3.4 - Stored Cross-Site Scripting

WordPress AB Google Map Travel plugin through 3.4 contains multiple stored cross-site scripting vulnerabilities. The plugin allows an attacker to hijack the administrator authentication for requests via the 1 lat Latitude, 2 long Longitude, 3 mapwidth, 4 mapheight, or 5 zoom Map Zoom parameters i...

6.8CVSS5.7AI score0.03831EPSS
SaveExploits2References5
Kitploit
Kitploit
•added 2026/10/04 5:52 p.m.•12 views

CVE-2026-8732

CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Auto Admin Creator 📌 Description This tool exploits CVE-2026-8732 , a vulnerability in the WP Google Map Pro plugin for WordPress. The vulnerability allows an unauthenticated attacker to obtain a valid wpmptoken via an AJAX endpoint...

9.8CVSS6.5AI score0.01859EPSS
SaveExploits8References1
NVD
NVD
•added 2026/10/01 10:17 a.m.•11 views

CVE-2026-96256

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Map block's 'marker' attribute in versions up to, and including, 6.4.5 This is due to insufficient input sanitization and output escaping ...

6.4CVSS0.00292EPSS
SaveExploits0References9
CVE
CVE
•added 2026/10/01 9:26 a.m.•19 views

CVE-2026-96256

The Gutenberg Essential Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 6.4.5 . The flaw resides in the Google Map block's 'marker' attribute due to inadequate input sanitization and output escaping of marker title and content values....

6.4CVSS6.1AI score0.00292EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/10/01 9:26 a.m.•47 views

CVE-2026-96256 Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Map block's 'marker' attribute in versions up to, and including, 6.4.5 This is due to insufficient input sanitization and output escaping ...

6.4CVSS0.00292EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•5 views

PT-2026-103771

Name of the Vulnerable Software and Affected Versions Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns versions prior to 6.4.6 Description Stored Cross-Site Scripting XSS occurs via the 'marker' attribute of the Google Map block. The issue stems from insufficient input...

6.4CVSS6.1AI score0.00292EPSS
SaveExploits0References13
GithubExploit
GithubExploit
•added 2026/06/01 9:06 a.m.•207 views

Exploit for CVE-2026-8732

CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Aut...

9.8CVSS6.2AI score0.01859EPSS
SaveExploits8
RedhatCVE
RedhatCVE
•added 2026/02/15 7:10 a.m.•25 views

CVE-2026-1096

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS5.8AI score0.0026EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/14 7:16 a.m.•20 views

CVE-2026-1096

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS0.0026EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/14 6:42 a.m.•12 views

CVE-2026-1096

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS5.7AI score0.0026EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/02/14 6:42 a.m.•48 views

CVE-2026-1096 Best-wp-google-map <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'latitude' Shortcode Attribute

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS0.0026EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/14 6:42 a.m.•47 views

CVE-2026-1096

CVE-2026-1096 affects the Best-wp-google-map WordPress plugin (versions

6.4CVSS6.1AI score0.0026EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/02/14 6:42 a.m.•8 views

CVE-2026-1096 Best-wp-google-map <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'latitude' Shortcode Attribute

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS6.1AI score0.0026EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/02/14 12:00 a.m.•30 views

PT-2026-8070

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'google map view' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible...

6.4CVSS5.7AI score0.0026EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/14 12:00 a.m.•0 views

CVE-2026-1096: Improper Neutralization of Input During Web Page Generation

The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'googlemapview' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS6AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/14 12:00 a.m.•26 views

WordPress plugin Best-wp-google-map 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.0026EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/02/13 11:00 p.m.•14 views

WordPress Best-wp-google-map plugin <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'latitude' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'latitude' Shortcode Attribute vulnerability discovered by theviper17y in WordPress Plugin Best-wp-google-map versions = 2.1...

6.4CVSS5.4AI score0.0026EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder