Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

WP Go Maps (formerly WP Google Maps) — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in WP Go Maps (formerly WP Google Maps), with AI-generated Chinese analysis, references, and POCs.

This page tracks vulnerabilities in WP Go Maps, formerly known as WP Google Maps, categorized under security weaknesses and tagged with its unique product identifier. It collects all known security issues affecting this WordPress plugin, including remote code execution, SQL injection, and cross-site scripting flaws, covering data from initial releases through the most recent patches. By aggregating these records, the page provides a centralized view of the plugin’s security landscape over time. Readers can use this resource to track vendor advisories as they are published, gaining insight into how quickly the developer responds to critical threats. The collection also allows users to understand specific weakness classes affecting the software, helping developers and administrators assess risk based on historical patterns of exploitation. Furthermore, one can look up the product’s vulnerability history to identify trends, such as recurring issue types or periods of high activity. This structured approach enables security professionals to evaluate the overall trustworthiness of the software and make informed decisions about updates and mitigation strategies. The data is sourced from official announcements and public repositories, ensuring accuracy and relevance for those monitoring the WordPress ecosystem. Whether you are a site owner, developer, or security analyst, this page serves as a practical tool for understanding the safety profile of WP Go Maps.

Vendor: WP Go Maps

CVE IDTitleCVSSSeverityPublished
CVE-2026-4268 WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings CWE-79 6.4 Medium2026-03-18
CVE-2026-0593 WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification CWE-862 5.3 Medium2026-01-24
CVE-2025-11307 WP Google Maps < 9.0.48 - Unauthenticated Stored XSS 6.1 -2025-11-11
CVE-2025-11703 WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning CWE-349 5.3 Medium2025-10-18
CVE-2025-11166 WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update CWE-352 5.4 Medium2025-10-09
CVE-2024-5994 WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-06-14
CVE-2024-3557 WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2024-05-24
CVE-2023-6777 WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service CWE-200 5.3 Medium2024-04-09
CVE-2024-1582 WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2024-03-13
CVE-2023-4839 WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting CWE-79 4.4 Medium2024-03-13
CVE-2023-6697 WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting CWE-79 6.1 Medium2024-01-24
CVE-2023-6627 WP Go Maps < 9.0.28 - Unauthenticated Stored XSS 6.1AIMediumAI2024-01-08
CVE-2022-47595 WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversal CWE-22 4.9 Medium2023-03-14

All 13 known CVE vulnerabilities affecting WP Go Maps (formerly WP Google Maps) with full Chinese analysis, references, and POCs where available.