CVE-2025-5194

The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-5194 WP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker

The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-5194 WP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker

The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2021-24643

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24643

The CVE-2021-24643 entry concerns the WordPress plugin WP Map Block (versions before 1.2.3). The root cause is insufficient escaping of certain attributes in the block, enabling Stored Cross-Site Scripting (XSS) when a user with a low privilege (contributor) interacts with the block (e.g., adding...

CVE-2021-24643 WP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

WordPress WP Map Block plugin <= 1.2.2 - Stored Cross-Site Scripting (XSS) vulnerabilities

Stored Cross-Site Scripting XSS vulnerabilities discovered by apple502j in WordPress WP Map Block plugin versions = 1.2.2. Solution Update the WordPress WP Map Block plugin to the latest available version at least 1.2.3...