WordPress Google Maps <7.11.18 - SQL Injection Detection

WordPress Google Maps plugin before 7.11.18 contains a SQL injection vulnerability. The plugin includes /class.rest-api.php in the REST API and does not sanitize field names before a SELECT statement. An attacker can possibly obtain sensitive information from a database, modify data, and execute...

PT-2025-45192

Name of the Vulnerable Software and Affected Versions Advanced Google Maps versions prior to 5.8.5 Description The wp-google-map-gold plugin for WordPress contains a missing authorization flaw resulting from an incorrectly configured access control security level. This occurs due to a missing...

WordPress Google Maps Plugin by Intergeo Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)

Software Google Maps Plugin by Intergeo Type Plugin Vulnerable versions = 2.3.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4887 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a4236d4e874a Credits Lana Codes...

WordPress Google Maps v3 Shortcode Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Google Maps v3 Shortcode Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23827 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6111df9930d9 Credits István Márton...

CVE-2021-24383

The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue...