Extension WordPress
Vulnérabilités Maps Plugin using Google Maps for WordPress – WP Google Map
Cette page rassemble les failles publiées pour Maps Plugin using Google Maps for WordPress – WP Google Map, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Maps Plugin using Google Maps for WordPress – WP Google Map
6 fiches
Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 – Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 – Authenticated (Admin+) Stored Cross-Site Scripting via Markers
The Maps Plugin using Google Maps for WordPress – WP Google Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.9.3 due to insufficient input sanitization and…
*-1.9.3
1.9.4
24/01/2025
Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 – Authenticated (Admin+) Stored Cross-Site Scripting
The Maps Plugin using Google Maps for WordPress – WP Google Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.9.3 due to insufficient input sanitization and…
*-1.9.3
1.9.4
24/01/2025
WP Google Map <= 1.8.3 – Arbitrary Post Deletion and Plugin Settings Update via Cross-Site Request Forgery
The Maps Plugin using Google Maps for WordPress plugin before 1.8.4 does not have CSRF checks in most of its AJAX actions, which could allow attackers to make logged in admins delete arbitrary posts and update the plugin's…
*-1.8.3
1.8.4
27/01/2022
WP Google Map <= 1.8.0 – Missing Authorization
The Privilege Escalation vulnerability discovered in the WP Google Map WordPress plugin (versions
*-1.8.0
1.8.1
08/12/2021
WP Google Map <= 1.8.0 – Subscriber+ Arbitrary Post Deletion and Plugin Settings Update
The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and…
*-1.8.0
1.8.1
08/12/2021
WP Google Map <= 1.7.6 – Admin+ Stored Cross-Site Scripting
The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scripting issue by high privilege users, even when the unfiltered_html capability…
*-1.7.6
1.7.7
01/07/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.