CVE-2021-24643

The CVE-2021-24643 entry concerns the WordPress plugin WP Map Block (versions before 1.2.3). The root cause is insufficient escaping of certain attributes in the block, enabling Stored Cross-Site Scripting (XSS) when a user with a low privilege (contributor) interacts with the block (e.g., adding...

CVE-2025-5194

The WP Map Block WordPress plugin (versions prior to 2.0.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly validate and escape certain block options before they are rendered in a page or post. This flaw could be exploited by users with the contribu...