Product by Code Cabin

    WP Go Maps (formerly WP Google Maps)

    16 known vulnerabilities in WP Go Maps (formerly WP Google Maps) (Code Cabin), 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WP Go Maps (formerly WP Google Maps) (Code Cabin)
    CriticalCVE-2019-10692

    WP Go Maps (formerly WP Google Maps): security vulnerability

    		9.8
    MediumCVE-2019-9912

    WP Go Maps (formerly WP Google Maps): Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2021-24383

    WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2024-29931

    WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2019-14792

    WP Go Maps (formerly WP Google Maps): Cross-Site Scripting (XSS)

    		5.4
    Not ratedCVE-2014-7182

    WP Go Maps (formerly WP Google Maps): Cross-Site Scripting (XSS)

    		—
    MediumCVE-2023-6777

    WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service

    also in 1 other product

    		5.3
    MediumCVE-2023-6627

    WP Go Maps < 9.0.28 - Unauthenticated Stored XSS

    		6.1
    MediumCVE-2022-47595

    WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversal

    		4.9
    MediumCVE-2021-36870

    WordPress WP Google Maps plugin <= 8.1.12 - Multiple Authenticated Persistent XSS vulnerabilities

    		5.5
    MediumCVE-2024-5994

    WPGMaps WP Go Maps (formerly WP Google Maps): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2021-36871

    Code Cabin WP Google Maps Pro: Cross-site Scripting

    		5.5
    MediumCVE-2024-3557

    WPGMaps WP Go Maps (formerly WP Google Maps): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1582

    WPGMaps WP Go Maps (formerly WP Google Maps): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-4839

    WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting

    also in 1 other product

    		4.4
    HighCVE-2025-24742

    WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability

    also in 1 other product

    		4.3

    All products by Code Cabin