Instant Locations

Instant Locations has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Instant Locations has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Vinit Lakra. Instant Locations is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.5.33.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Instant Locations vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-58886

Instant Locations <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv1.0

Instant Locations

Tan Nguyen

Author

Tan Nguyen

0.0(0)
0/100
Last Updated
2016-04-21 (11y ago)
Active Installs
10+
Downloads
2,887
Requires WP
3.9+
Requires PHP
0+
Tested up to
WP 4.5.33
Created
2016-04-21 (11y ago)

Imagine you have to enter information for shops, hotels, or companies… you’d probably need various fields: address, state, suburb, post code, latitude, longitude… Each time you add or edit them, you must enter and check all these fields manually. It’s such a nightmare if you have hundreds or thoudsands posts because it’s slow, time-consuming and sometimes, inaccurate. You’ll need a better way to work with it. All data should auto populate immediately without setup location database. Instant Locations interacts with Google Maps API and automatically populates location data into your fields. Now you only have to type the desired address, verify it by the auto-suggested addresses from Google Maps API and then select the correct one from dropdown. All other fields’ values (post code, street, state, country, …) will be automatically filled in instantly. See how it works Who need to use it? As we mentioned above, all website which need to enter locations data. For exaple: real estate, dating, car parking, restaurant, hotel, tour, coffee shop, local… Is this fast? It’s not fast, it’s instant. Plugin Links Github

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C