Known vulnerabilities in the Wp Maps plugin
27 security advisories have been published for the Wp Maps plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- WP Maps - Security Vulnerability (CVE-2026-13456) HIGH
- WP Maps - Security Vulnerability (CVE-2026-13179) MEDIUM
- WP Maps - Security Vulnerability (CVE-2026-66618) HIGH
- WP Maps - Cross-Site Request Forgery (CSRF) (CVE-2026-18466) MEDIUM
- WP Maps - Path Traversal (CVE-2026-16263) HIGH
- WP Maps - Denial of Service (CVE-2026-16265) MEDIUM
- WP Maps - SQL Injection (CVE-2026-39492) CRITICAL
- WP Maps - Cross-Site Scripting (XSS) (CVE-2026-9594) MEDIUM
- WP Maps - Path Traversal (CVE-2026-6381) HIGH
- Wp Maps - Cross-Site Scripting (XSS) (CVE-2025-13364) MEDIUM
- WP Maps - SQL Injection (CVE-2026-2580) HIGH
- Wp Maps - SQL Injection (CVE-2026-3222) HIGH
- Wp Maps - Path Traversal (CVE-2025-12062) HIGH
- WP Maps - PHP Object Injection (CVE-2025-67535) MEDIUM
- Wp Maps - Cross-Site Scripting (XSS) (CVE-2025-3504) MEDIUM
- Wp Maps - Cross-Site Scripting (XSS) (CVE-2025-3503) MEDIUM
- Wp Maps - Cross-Site Scripting (XSS) (CVE-2025-3502) MEDIUM
- Wp Maps - Cross-Site Request Forgery (CSRF) (CVE-2023-28172) MEDIUM
- Wp Maps - Cross-Site Scripting (XSS) (CVE-2023-23878) MEDIUM
- Wp Maps - Cross-Site Request Forgery (CSRF) (CVE-2022-25600) MEDIUM
- Wp Maps - Cross-Site Scripting (XSS) (CVE-2021-24502) MEDIUM
- Wp Maps - SQL Injection (CVE-2021-24130) HIGH
- Wp Maps - Cross-Site Request Forgery (CSRF) (CVE-2015-9309) HIGH
- Wp Maps - Cross-Site Request Forgery (CSRF) (CVE-2015-9308) HIGH
- Wp Maps - Cross-Site Request Forgery (CSRF) (CVE-2015-9307) HIGH
- Wp Maps - Cross-Site Scripting (XSS) (CVE-2016-10878) MEDIUM
- Wp Maps - Cross-Site Scripting (XSS) (CVE-2015-9305) MEDIUM