Wp Maps
Vendor:
First CVE: Aug 12, 2019 · Active for 6 years
13
Total CVEs
More Total CVEs than 91% of tracked products
2.6
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Wp Maps over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 12, 2019
6 years ago
Most Recent CVE
May 1, 2025
449 days ago
CVE Severity & Scoring
Wp Maps13 CVEs
54%
46%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network13 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (7.7%)
Unknown0 (0.0%)
Required12 (92.3%)
Privileges Required
Low1 (7.7%)
High5 (38.5%)
None7 (53.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-9308HIGH The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature. | Aug 14, 2019 | 8.8 | 28 | NO | NO |
CVE-2023-28172HIGH Cross-Site Request Forgery (CSRF) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) plugin <= 4.4.2 versions. | Nov 12, 2023 | 8.8 | 24 | NO | NO |
CVE-2015-9309HIGH The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature. | Aug 14, 2019 | 8.8 | 24 | NO | NO |
CVE-2015-9307HIGH The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature. | Aug 14, 2019 | 8.8 | 24 | NO | NO |
CVE-2022-25600HIGH Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <= 4.2.3). | Mar 11, 2022 | 8.8 | 22 | NO | NO |
CVE-2021-24130HIGH Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection throu | Mar 18, 2021 | 7.2 | 22 | NO | NO |
CVE-2016-10878MEDIUM The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS. | Aug 12, 2019 | 6.1 | 21 | NO | NO |
CVE-2023-23878MEDIUM Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin <= 4.3.9 versions. | Apr 4, 2023 | 5.4 | 19 | NO | NO |
CVE-2021-24502MEDIUM The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scripting issue by high | Aug 9, 2021 | 4.8 | 18 | NO | NO |
CVE-2025-3503MEDIUM The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site | May 1, 2025 | 4.8 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Wp Maps
Top CWEs
Versions
No cataloged versions.