Approved changes feed: RSS · Atom

cpe:2.3:a:very_simple_google_maps_project:very_simple_google_maps:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorVery Simple Google Maps Project (5e3e2a59-cca2-5182-8624-deb28e36a329)
ProductVery Simple Google Maps (7a5e4af1-3c15-5036-aaef-5c817da45562)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/very-simple-google-maps purl2cpe 2026-06-01 10:17:50.912342

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5744 vulnerable 2026-06-08 06:19:44.603380 Very Simple Google Maps <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MEDIUM (6.4)
The Very Simple Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vsgmap' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2023-10-24T13:53:01.122Z
Updated: 2026-04-08T17:34:50.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23864 vulnerable 2026-06-08 05:56:04.586490 WordPress Very Simple Google Maps Plugin <= 2.8.4 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Michael Aronoff Very Simple Google Maps plugin <= 2.8.4 versions.
Published: 2023-03-23T12:44:52.083Z
Updated: 2026-04-28T16:08:03.580Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.