CVE-2021-24383

The CVE-2021-24383 entry concerns the WordPress WP Google Maps plugin (versions prior to 8.1.12). The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) flaw caused by insufficient sanitization/validation/escaping of the Map Name when output in the Map List on the admin dashboard...

CVE-2019-14792

The CVE-2019-14792 entry applies to the WordPress WP Google Maps plugin prior to version 7.11.35. The vulnerability arises from an XSS flaw in the plugin via the wp-admin/ rectangle_name or rectangle_opacity parameters, caused by insufficient input validation/sanitization. Public sources in the c...

CVE-2021-36870

The CVE-2021-36870 issue affects WordPress WP Google Maps plugin ≤ 8.1.12. The connected sources describe multiple authenticated persistent XSS vulnerabilities in this plugin, with vulnerable parameters including dataset_name, wpgmza_gdpr_retention_purpose, wpgmza_gdpr_company_name, name, polynam...

CVE-2021-36871

CVE-2021-36871 corresponds to multiple authenticated persistent cross-site scripting (XSS) vulnerabilities in the WordPress WP Google Maps Pro premium plugin (versions ≤ 8.1.11). The issues arise from unsanitized inputs in several vulnerable parameters (e.g., wpgmaps_marker_category_name, &attrib...