Wp Go Maps
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_go_maps:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Go Maps (c270968d-b514-5f51-8796-0dbb584eab72) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-15381 |
vulnerable | 2026-09-16 04:33:06.823796 |
WP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filter
The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.
Published: 2026-07-31T06:00:09.998Z
Updated: 2026-07-31T17:47:20.807Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8386 |
vulnerable | 2026-07-29 01:09:05.830798 |
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID
The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that an administrator has not yet approved for public display, including any PII placed in the address and description fields and the marker's geographic coordinates.
Published: 2026-06-15T06:00:02.121Z
Updated: 2026-06-15T16:44:33.201Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8385 |
vulnerable | 2026-07-29 01:09:05.830525 |
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback
The WP Go Maps WordPress plugin before 10.0.10 does not properly enforce the marker approval filter on the admin-ajax fallback for its datatables route, allowing unauthenticated visitors to retrieve marker records that the site owner has not approved for public display, including their title, category, address and description fields.
Published: 2026-06-15T06:00:01.881Z
Updated: 2026-06-15T12:37:31.988Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.