Interactive UK Map
Interactive UK Map has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 8.2, and the most serious one scores 8.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Interactive UK Map has a vendor fix available, so running the current release closes it.
All of these findings were reported by SOPROBRO. Interactive UK Map is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-56267Interactive UK Map <= 3.4.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Interactive UK Map
Author
html5maps
Put an interactive high-quality HTML5 Map of the UK Regions to your WordPress powered blog! This plugin allows you to embed the colorful interactive UK map to your WordPress powered website. Interactive map is the best way to provide your blog with geographically-related content or effective navigation system. Just add a special shortcode into any blog page or post and you will find our map in the blog after the few seconds. Functional editor allows you to easily add popup balloons for additional information. Features: Interactive map of the UK Responsive and mobile-friendly Clickable regions Popup windows that show when the mouse cursor is over it Customizable links Builds into any WordPress page or post as a simple shortcode Find other UK HTML5 maps and WordPress map plugins at Fla-shop.com The plugin “Interactive UK Map” is based on and uses CDN-hosted map libraries. The free version of the map display the “Map by Fla-shop.com” link as required by the license agreement found here. The Premium plugins are branding free and additionally include all required map libraries to put on your server.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C