Very Simple Google Maps
Very Simple Google Maps has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Very Simple Google Maps has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Very Simple Google Maps is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2023-5744Very Simple Google Maps <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Read the full analysisVulnerability Records
Very Simple Google Maps
Author
Michael Aronoff
Adding an embedded Google Map is a must for most websites. I have created a simple way to add your map with just a simple shortcode. Despite the name there are some nice features that makes this plugin simple but powerful. Features Included Simple to use with just a shortcode. No admin settings to mess with. All features are set within the shortcode. Can be styled with CSS Optionally link your map marker to your Google business listing directly so your business name is shown. Usage The basic shortcode to use is [vsgmap address="street address to display"] See the FAQ for full usage options. Problems and Support To get fastest response use the support page in the plugin area on WordPress.org Please Review! I would love some feedback. I will try and respond to any issues you might have. Comments, Feedback and Request Features To send any suggestions, comments, or feedback about this plugin send a message to us.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C