Wp Go Maps (Formerly Wp Google Maps)
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_go_maps_(formerly_wp_google_maps):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Go Maps (Formerly Wp Google Maps) (42bd660a-57ce-565e-b5da-5ffe348f4cdc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11307 |
vulnerable | 2026-06-08 07:02:28.573217 |
WP Google Maps < 9.0.48 - Unauthenticated Stored XSS
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.48 does not sanitize user input provided via an AJAX action, allowing unauthenticated users to store XSS payloads which are later retrieved from another AJAX call and output unescaped.
Published: 2025-11-11T06:00:06.520Z
Updated: 2025-11-13T18:03:20.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6627 |
vulnerable | 2026-06-08 06:21:55.140564 |
WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.28 does not properly protect most of its REST API routes, which attackers can abuse to store malicious HTML/Javascript on the site.
Published: 2024-01-08T19:00:30.023Z
Updated: 2025-06-18T16:53:01.945Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.