Approved changes feed: RSS · Atom

cpe:2.3:a:codecabin:wp_go_maps:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorCodecabin (56777168-a1cd-547c-8039-fdc4e36d1346)
ProductWp Go Maps (3fd9d012-8a1a-58a5-bd68-4d07287b8908)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/codecabin/wp-google-maps purl2cpe 2026-06-01 10:12:42.484726
pkg:github/wp-plugins/wp-google-maps purl2cpe 2026-06-01 10:12:42.484728
pkg:github/wpplugins/wp-google-maps purl2cpe 2026-06-01 10:12:42.484730

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47595 vulnerable 2026-06-08 05:50:40.785227 WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversal
MEDIUM (4.9)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Go Maps (formerly WP Google Maps) plugin <= 9.0.15 versions.
Published: 2023-03-14T06:27:58.886Z
Updated: 2026-04-28T16:07:58.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36870 vulnerable 2026-06-08 05:32:52.642229 WordPress WP Google Maps plugin <= 8.1.12 - Multiple Authenticated Persistent XSS vulnerabilities
MEDIUM (5.5)
Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (versions <= 8.1.12). Vulnerable parameters: &dataset_name, &wpgmza_gdpr_retention_purpose, &wpgmza_gdpr_company_name, &name #2, &name, &polyname #2, &polyname, &address.
Published: 2021-09-09T11:18:20.862Z
Updated: 2026-04-28T16:07:35.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24383 vulnerable 2026-06-08 05:30:04.282530 WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue
Published: 2021-06-21T19:18:26.000Z
Updated: 2024-08-03T19:28:23.794Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9912 vulnerable 2026-06-08 05:14:26.412718 Details available
The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO.
Published: 2019-03-21T23:01:44.000Z
Updated: 2024-08-04T22:01:55.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14792 vulnerable 2026-06-08 05:12:56.022138 Details available
The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.
Published: 2019-08-09T12:14:49.000Z
Updated: 2024-08-05T00:26:38.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10692 vulnerable 2026-06-08 05:12:24.913303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7182 vulnerable 2026-06-08 05:05:58.859172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.