Maps Plugin using Google Maps for WordPress – WP Google Map

Maps Plugin using Google Maps for WordPress – WP Google Map has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 6 are fixed as of October 2026. Their average CVSS score is 5.2, and the most serious one scores 6.5 out of 10. 2021 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Improper Privilege Management.

Every one of the 6 issues recorded for Maps Plugin using Google Maps for WordPress – WP Google Map has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (2) reported by Krzysztof Zając.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Maps Plugin using Google Maps for WordPress – WP Google Map vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2021-25081

WP Google Map <= 1.8.3 - Arbitrary Post Deletion and Plugin Settings Update via Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

6 records


2025-01-24 00:00	Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Markers Maps Plugin using Google Maps… <= 1.9.3	`CVE-2024-13208`	4.4 Medium	Krugov Artyom	Yes
2025-01-24 00:00	Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting Maps Plugin using Google Maps… <= 1.9.3	`CVE-2024-13306`	4.4 Medium	Bob Matyas	Yes
2022-01-27 00:00	WP Google Map <= 1.8.3 - Arbitrary Post Deletion and Plugin Settings Update via Cross-Site Request Forgery Maps Plugin using Google Maps… <= 1.8.3	`CVE-2021-25081`	6.5 Medium	Krzysztof Zając	Yes
2021-12-08 12:44	WP Google Map <= 1.8.0 - Missing Authorization Maps Plugin using Google Maps… <= 1.8.0	`CVE-2021-45729`	5.4 Medium	Nguyen Van Khanh	Yes
2021-12-08 00:00	WP Google Map <= 1.8.0 - Subscriber+ Arbitrary Post Deletion and Plugin Settings Update Maps Plugin using Google Maps… <= 1.8.0	`CVE-2021-25011`	5.7 Medium	Krzysztof Zając	Yes
2021-07-01 00:00	WP Google Map <= 1.7.6 - Admin+ Stored Cross-Site Scripting Maps Plugin using Google Maps… <= 1.7.6	`CVE-2021-24502`	4.8 Medium	Pratik Khalane	Yes

Showing 1–6 of 6 reports