Known Vulnerabilities for Wordpress Google Maps Plugin by Wpgmaps
Listed below are 1 of the newest known vulnerabilities associated with "Wordpress Google Maps Plugin" by "Wpgmaps".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-4268 json | The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmza_... | Not Provided | 2026-03-18 | 2026-04-08 |
| CVE-2026-3581 json | The Basic Google Maps Placemarks plugin for WordPress is vulnerable to authorization bypass in versions up to, and including,... | Not Provided | 2026-04-16 | 2026-04-16 |
| CVE-2026-3516 json | The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all ... | Not Provided | 2026-03-21 | 2026-04-08 |
| CVE-2026-2589 json | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in ... | Not Provided | 2026-03-06 | 2026-04-08 |
| CVE-2025-67535 json | Deserialization of Untrusted Data vulnerability in Flipper Code - WordPress Development Company WP Maps wp-google-map-plugin ... | Not Provided | 2025-12-09 | 2026-04-23 |
| CVE-2025-13364 json | The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable... | Not Provided | 2026-04-16 | 2026-04-16 |
| CVE-2025-8689 json | The Elements Plus! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Comparison, HotSp... | Not Provided | 2025-09-11 | 2026-04-08 |
| CVE-2025-8624 json | The Nexa Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Google Maps widget in all ... | Not Provided | 2025-09-30 | 2026-04-08 |
| CVE-2025-8566 json | The GutenBee – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via parameters in the Cou... | Not Provided | 2025-09-30 | 2026-04-08 |
| CVE-2024-5994 json | The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom JS opti... | Not Provided | 2024-06-14 | 2026-04-08 |