CVE-2016-10878

The vulnerability CVE-2016-10878 affects the WordPress plugin wp-google-map-plugin

CVE-2016-10878

The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS...

CVE-2015-9305

CVE-2015-9305 affects the WordPress plugin wp-google-map-plugin prior to version 2.3.7, with a Cross-Site Scripting (XSS) vulnerability involving the add_query_arg() and remove_query_arg() functions. Root cause is improper handling/validation of client-side data in the plugin, enabling injected s...

PT-2019-7264 · WordPress · Wp-Google-Map-Plugin

Name of the Vulnerable Software and Affected Versions: wp-google-map-plugin versions prior to 2.3.7 Description: The issue is related to Cross-Site Scripting XSS and involves the add query arg and remove query arg functions. Recommendations: For versions prior to 2.3.7, update to version 2.3.7 or...

WordPress Plugin Google Map SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language. Users can set up their own websites on servers that support PHP and MySQL databases. A SQL injection vulnerability exists in the WordPress plugin Google Map. An attacker can exploit the vulnerability by injecting special vectors...

Multiple SQL Injection Vulnerabilities in WordPress WP Google Map Plugin

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Multiple SQL injection vulnerabilities exist in the WordPress WP Google Map plugin, which can be exploited by attackers to...

WordPress Google Map Plugin < 4.0.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: WordPress Google Map Plugin getresults Vulnerable Variable: $GET'order' Vulnerable URL: http://vulnerablesite.com/wp-admin/admin.php?page=wpgmpmanagelocation&orderby=locationaddress&order=asc PROCEDURE...

CVE-2018-0577

Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0577

The CVE-2018-0577 entry corresponds to a cross-site scripting (XSS) vulnerability in the WordPress WP Google Map Plugin prior to version 4.0.4. Multiple connected sources (OpenVAS description, JVN entries, CVE records) consistently indicate that the flaw enables remote attackers to inject arbitra...

CVE-2018-0577

Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2018-8935 · WordPress · Wp-Google-Map-Plugin

Name of the Vulnerable Software and Affected Versions: WP Google Map Plugin versions prior to 4.0.4 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations: For WP Google Map Plugin versions prior to 4.0.4, update to version 4.0.4 ...

WordPress WP Google Map Plugin plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Google Map Plugin plugin versions prior to 4.0.4, which can b...

CVE-2017-17744

A cross-site scripting XSS vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter to view/advancedsettings.php...

Cross site scripting

A cross-site scripting XSS vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter to view/advancedsettings.php...

CVE-2017-17744

A cross-site scripting XSS vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter to view/advancedsettings.php...

CVE-2017-17744

The CVE-2017-17744 entry concerns the WordPress Custom Map plugin (

WP Google Map Plugin < 3.0.0 - CSRF to Authenticated Cross-Site Scripting (XSS)

The lack of CSRF Protection could allow attackers to perform XSS attack against logged in administrators. ' / ' /...