WP Go Maps (formerly WP Google Maps)

WP Go Maps is a plugin that allows users to add customized Google maps, map blocks, or store locators to their WordPress posts and pages using a shortcode. The free version allows users to create a Google map with an unlimited number of markers, while the Pro version offers more advanced features such as custom markers with locations, descriptions, images, categories, links, and directions. The plugin also supports Elementor maps and map widgets for classic WordPress installations.

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.47

    Fixed

    The Google Maps plugin used in WordPress is at risk of being hacked because it doesn't properly check the information it receives and doesn't protect itself from harmful code. This means that attacke...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.48

    Fixed

    The WP Go Maps plugin, previously known as WP Google Maps, is at risk for Cache Poisoning. This means that in all versions up to 9.0.48, the plugin does not use cached data from server responses and ...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.46

    Fixed

    The WP Go Maps plugin, previously known as WP Google Maps, is at risk of being manipulated by outside sources. This is because the plugin allows actions to be taken without proper security measures, ...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.40

    Fixed

    The WP Go Maps plugin for WordPress has a security issue that could allow unauthorized access to the site. This is because there is a problem with how the plugin verifies certain requests, which coul...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.38

    Fixed

    The WP Go Maps plugin, previously known as WP Google Maps, has a security vulnerability in versions 9.0.38 and below. This vulnerability allows attackers with contributor-level permissions or higher,...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.36

    Fixed

    The WP Go Maps plugin for WordPress has a security issue where attackers can inject harmful code into pages using the plugin's wpgmza shortcode. This can happen in all versions up to 9.0.36 because t...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.29

    Fixed

    The WP Google Maps plugin for WordPress has a security issue in versions up to and including 9.0.29. This means that hackers can insert harmful code into web pages if they can trick a user into click...

    Read More
  • Access violation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.34

    Fixed

    The WP Go Maps plugin, previously known as WP Google Maps, used in WordPress, has a security issue in versions 9.0.34 and below. This is because the plugin adds the API key to certain files, making i...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.32

    Fixed

    The WP Go Maps plugin for WordPress has a security issue where attackers with certain permissions can inject harmful code onto pages that will run when someone visits the page. This vulnerability aff...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.32

    Fixed

    The WP Go Maps plugin for WordPress has a security vulnerability that allows attackers to inject harmful code into pages. This can happen if the attacker has administrator-level permissions and the w...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.28

    Fixed

    The WP Go Maps plugin, previously known as WP Google Maps, for WordPress has a security issue that allows hackers to inject harmful scripts into webpages. This happens when the map id parameter is no...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.27

    Fixed

    The WP Go Maps plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This vulnerability affects all versions of the plugin up to and including 9.0.27. It is possi...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 7.11.28

    Fixed

    The WP Google Maps plugin for WordPress is not secure in versions up to and including 7.11.27. This means that attackers, who are already logged in, can change the settings of the plugin. This happen...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 7.10.41

    Fixed

    The wp-google-maps plugin

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 6.3.14

    Fixed

    The WP Google Maps plugin for WordPress is vulnerable to a security issue called Stored Cross-Site Scripting. This issue allows an attacker with certain privileges to add malicious code, such as web ...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 7.11.17

    Fixed

    The wp-google-maps plugin for WordPress contained a security issue before version 7.11.18. The issue was that the part of the plugin responsible for the REST API did not properly clean up field names ...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 8.1.13

    Fixed

    The WordPress WP Google Maps plugin (versions up to 8.1.12) has several security issues that allow malicious content to be inserted into the website. This content can be seen by other people and put t...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 7.11.35

    Fixed

    The WP Google Maps plugin for WordPress contained a security vulnerability prior to version 7.11.35. This vulnerability allowed malicious code to be injected into the website through the wp-admin sect...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 8.1.12

    Fixed

    The WordPress plugin WP Google Maps before version 8.1.12 had a security issue. It did not check or protect the Map Name when it was listed on the admin dashboard. This could have let someone with acc...

    Read More
  • Input validation vulnerability in WP Go Maps (formerly WP Google Maps) 6.0.27

    Fixed

    The WP Google Maps plugin for WordPress is not secure in versions before and including 6.0.26. Unauthenticated attackers can trick a user into clicking on a link and inject dangerous web scripts

    Read More
  • Access violation vulnerability in WP Go Maps (formerly WP Google Maps) 9.0.15

    Fixed

    The WP Go Maps plugin

    Read More