CVE-2024-13306

CVE-2024-13306 affects the Maps Plugin using Google Maps for WordPress (WP Google Map) prior to version 1.9.4. The vulnerability arises from insufficient sanitisation/escaping of certain plugin settings, enabling stored XSS by high-privilege users (e.g., admins), including scenarios where unfilte...

CVE-2024-13208

The CVE-2024-13208 entry refers to the Maps Plugin using Google Maps for WordPress that, prior to version 1.9.4, does not sanitize and escape certain settings. This could allow stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is not allowed (such as in multisite). The v...