Vendor

    WPGMaps

    15 known vulnerabilities in products by WPGMaps, 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WPGMaps
    MediumCVE-2023-6697

    WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting

    		6.1
    HighCVE-2024-29931

    WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2026-84780

    WordPress WP Go Maps plugin <= 10.1.08 - Denial of Service Attack vulnerability

    		5.3
    MediumCVE-2023-6777

    WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service

    also in 1 other product

    		5.3
    MediumCVE-2026-12238

    WP Go Maps <= 10.1.01 - Unauthenticated Arbitrary Record Creation

    		5.3
    MediumCVE-2026-25466

    WordPress WP Go Maps plugin <= 10.1.04 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-4268

    WPGMaps WP Go Maps (formerly WP Google Maps): Cross-site Scripting

    		6.4
    MediumCVE-2024-5994

    WPGMaps WP Go Maps (formerly WP Google Maps): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2026-0593

    WPGMaps WP Go Maps (formerly WP Google Maps): Missing Authorization

    		5.3
    MediumCVE-2024-3557

    WPGMaps WP Go Maps (formerly WP Google Maps): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1582

    WPGMaps WP Go Maps (formerly WP Google Maps): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2025-11703

    WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning

    		5.3
    MediumCVE-2025-11166

    WPGMaps WP Go Maps (formerly WP Google Maps): Cross-Site Request Forgery (CSRF)

    		5.4
    MediumCVE-2023-4839

    WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting

    also in 1 other product

    		4.4
    HighCVE-2025-24742

    WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability

    also in 1 other product

    		4.3

    Products

    Products by WPGMaps
    Wp Go Maps (formerly Wp Google Maps)100
    Wp Go Maps50