Travel Map

Travel Map has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Travel Map has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Travel Map is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Travel Map vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2023-41860

Travel Map <= 1.0.1 - Unauthenticated Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-09-22 00:00	Travel Map <= 1.0.3 - Cross-Site Request Forgery Travel Map <= 1.0.3	`CVE-2025-57960`	4.3 Medium	Nabil Irawan	Yes
2023-09-05 00:00	Travel Map <= 1.0.1 - Unauthenticated Cross-Site Scripting Travel Map <= 1.0.1	`CVE-2023-41860`	7.2 High	Kévin Mosbahi (Mika)	Yes

Showing 1–2 of 2 reports

Latestv1.0.4

Travel Map

Author

TravelMap

5.0(1)

100/100

Last Updated

2026-08-28 (16d ago)

Active Installs

1,000+

Downloads

22,159

Requires WP

3.0.1+

Requires PHP

Tested up to

WP 7.1

Created

2016-10-23 (10y ago)

TravelMap plugin allows you to create, trace and manage your travel itinerary right from your WordPress admin. Free to use without having to create an account. Here is a DEMO of what it looks like on a blog post. Features: An interactive map in your WordPress admin Instantly show where you are, where you’ve been and where you’re about to go Trace your itinerary using different colors for different transport modes One click geolocation: pin a new spot on your map to update your itinerary Embed the map anywhere on your website Features that require a TravelMap account: Multiple maps (free) Link photos and articles to your map (free) Trace lines following the roads (premium) Custom theme and map style (premium) Live Tracking with GPS tracker (contact us) And many more… For more details about our premium offers, visit the pricing page. If you have any question or suggestion, don’t hesite to contact us.

View on WordPress.org