WP Go Maps – Google Map, OpenStreetMap, Leaflet Map

Explore WP Go Maps – Google Map, OpenStreetMap, Leaflet Map vulnerabilities across all versions. Currently tracking 26 known vulnerabilities, including severity, impact, and patch status.

01234567891026.01.2012Today15.10.20146.1WP Google Maps <= 6.0.26 - Reflected Cross-Site Scripting CVSS 6.1 · 15.10.201410.11.20166.4WP Google Maps <= 6.3.14 - Stored Cross-Site Scripting CVSS 6.4 · 10.11.201605.02.20196.1WP Google Maps < 7.10.43 - Reflected Cross-Site Scripting CVSS 6.1 · 05.02.201903.06.20194.3WP Google Maps <= 7.11.27 - Cross-Site Request Forgery CVSS 4.3 · 03.06.201908.07.20196.1WP Google Maps <= 7.11.34 - Cross-Site Request Forgery to Cross-Site Scripting CVSS 6.1 · 08.07.201909.09.20209.8WP Go Maps (formerly WP Google Maps) <= 7.11.17 - SQL Injection CVSS 9.8 · 09.09.202007.06.20215.4WP Google Maps <= 8.1.11 - Authenticated Stored Cross-Site Scripting CVSS 5.4 · 07.06.202108.09.20215.5WP Google Maps <= 8.1.12 - Authenticated Stored Cross-Site Scripting CVSS 5.5 · 08.09.202120.01.20234.9WP Go Maps <= 9.0.15 - Authenticated (Admin+) Directory Traversal CVSS 4.9 · 20.01.202318.12.20236.1WP Google Maps <= 9.0.27 - Unauthenticated Stored Cross-Site Scripting via REST API CVSS 6.1 · 18.12.202323.01.20246.1WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting CVSS 6.1 · 23.01.202412.03.20246.4WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 12.03.20244.4WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 12.03.202418.03.20245.3WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service CVSS 5.3 · 18.03.202425.03.20246.1WP Google Maps <= 9.0.29 - Reflected Cross-Site Scripting CVSS 6.1 · 25.03.202423.05.20246.4WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 23.05.202413.06.20246.4WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 13.06.202424.01.20254.3WP Go Maps <= 9.0.40 - Cross-Site Request Forgery CVSS 4.3 · 24.01.202508.10.20255.4WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update CVSS 5.4 · 08.10.202517.10.20255.3WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning CVSS 5.3 · 17.10.202521.10.20257.2Google Maps <= 9.0.47 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 21.10.202524.01.20265.3WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification CVSS 5.3 · 24.01.202617.03.20266.4WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings CVSS 6.4 · 17.03.202605.06.20265.3WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback CVSS 5.3 · 05.06.202619.06.20265.3WP Go Maps <= 10.1.01 - Unauthenticated Arbitrary Record Creation CVSS 5.3 · 19.06.202622.07.20265.3WP Go Maps – Google Map, OpenStreetMap, Leaflet Map <= 10.1.05 - Missing Authorization CVSS 5.3 · 22.07.2026

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

26

Get automatic notifications for all WP Go Maps – Google Map, OpenStreetMap, Leaflet Map vulnerabilities before they are exploited.

Vulnerability Records

26 records
2026-07-22 00:00CVE-2026-25466
5.3
Medium
Bao - BlueRockYes
2026-06-19 06:01CVE-2026-12238
5.3
Medium
Thanh ĐiềmYes
2026-06-05 00:00CVE-2026-8385
5.3
Medium
Sudhanshu ChauhanYes
2026-03-17 13:24CVE-2026-4268
6.4
Medium
bashuYes
2026-01-24 04:04CVE-2026-0593
5.3
Medium
Moose LoveYes
2025-10-21 00:00CVE-2025-11307
7.2
High
sunghoon kimYes
2025-10-17 17:52CVE-2025-11703
5.3
Medium
Dmitrii IgnatyevYes
2025-10-08 13:41CVE-2025-11166
5.4
Medium
Dmitrii IgnatyevYes
2025-01-24 00:00CVE-2025-24742
4.3
Medium
Joshua ChanYes
2024-06-13 00:00CVE-2024-5994
6.4
Medium
Tim CoenYes
Showing 1–10 of 26 reports
WP Go Maps &#8211; Google Map, OpenStreetMap, Leaflet Map banner
Latestv10.1.06

WP Go Maps &#8211; Google Map, OpenStreetMap, Leaflet Map

WPGMaps

Author

WPGMaps

4.8(3,027)
96/100
Last Updated
2026-07-23 (6d ago)
Active Installs
300,000+
Downloads
27,980,283
Requires WP
6.0+
Requires PHP
7.0+
Tested up to
WP 7.0.2
Created
2012-01-26 (15y ago)

The easiest to use Google Maps, Leaflet and Open Layers Map Plugin (including a Map Block)! Formerly WP Google Maps. Add a customized Google map, map block or Store Locator to your WordPress posts and/or pages quickly and easily with the supplied shortcode. No fuss. No iFrames and super easy to use! Perfect for contact page maps, routes, maps showing delivery areas and any other use you can think of! While the free version of WP Go Maps allows you to create a Google map with as many markers as you like, the Pro version allows you to do so much more! Create Elementor Maps, map blocks and map widgets easily with our WP Go Maps Elementor map block integration, straight out the box! Do you use the classic editor? We still support map widgets for classic WordPress installations. No need to compromise, the map widget includes the same functionality as our map blocks! The WP Go Maps Pro Version version allows you create custom Google maps with high quality markers containing locations, descriptions, images, categories, links and directions. Lite Version (Free) The most popular WordPress map plugin Choose between Google Maps, Leaflet, Azure Maps, Stadia Maps, Maptiler, LocationIQ, Zero Cost or Open Layers Maps Super easy to use, no coding required! Create as many map markers as you need by simply typing in the address Responsive maps Elementor Map block Edit your map markers with the click of a button 9 popular map themes to choose from Create or add your own map theme Drag map markers to an exact location Add a map block to your page Google Maps Streetview supported UTF-8 character support Map widget functionality Full screen map functionality Support for localization Choose from four Google maps types: roadmap, terrain, satellite and hybrid Define your own width, height and zoom level for your map Add animations to your map markers! Store locator functionality Restrict a store locator search by country Add Polygons to your Map Add Polylines / Routes to your map Create a map in less than a 30 seconds! Right click to add a marker to your map No advertising or links Google Maps Autocomplete Google Maps Transport Layer Set the max zoom level for your map Serve your map marker data via your database or an XML file Compatible with caching plugins Compatible with Cloudfare Latest Google Maps API Latest OpenLayers API Latest Leaflet API Professional Edition Create multiple maps! Allow your visitors to get directions to your markers. Add descriptions, links and images to your map markers. Add categories to your map markers Filter markers by category Mashup multiple maps Advanced map blocks Store locator map block Directions map block Infowindow block Map block (filter) Add different marker icons, or your own icons to make your map really stand out! List your map markers in the four ways; basic list, basic table, carousel, advanced table Allow visitors to use their map location as the starting or ending point for the directions Choose between the Default Google Maps Infowindow and the new Modern Infowindow Export/Import your markers to a CSV file for quick editing. Link Fusion tables to your Google Maps Show your visitor’s location on the Map Import KML/KMZ files to your map More advanced options for the Store Locator Allow users to use their map location for the store locator Store locator search by category Hide all map markers until a store locator search is done Move your marker list inside the map window Multiple map widget functionality Add retina-ready map marker icons WordPress Network friendly Get the WP Go Maps Professional Edition Translations Get a free copy of the WP Go Maps Pro version in exchange for translating our plugin! English – default Russian (Alexandra Bondareva) German French (Arnaud Thomas) Polish (Michal Kotnowski) Finnish (Johanna Joutti) Dutch (Jan Wind) Hebrew (Gal Dotan) Danish (Patrick Jepsen) Italian (Tommaso Mori & Massimo Bregani) Croatian (Sven Kopun) Greek (Konstantinos Koukoulakis) Romanian (Cosmin Stroe) Spanish (Carmelo Villegas Cruz) Portuguese (Jose Antonio Ribeiro) Brazilian Portuguese (Roberto Costa) Turkish (Suha Karalar) Swedish (Martin Sleipner) Bulgarian (Lyubomir Kolev) Indonesian (Neno) Lithuanian Czechoslovakian^ ^Language file needs to be updated Demos WP Go Maps Lite Basic Google Map with Markers Store Locator Polygons & Polyines/Routes Google Maps Transit Layer Google Maps Traffic Layer Google Maps Bicycle Layer WP Go Maps Pro Google map with advanced markers Marker listings – Simple Marker listings – Advanced Google Maps Directions Responsive Map Marker Categories (Filtering) Advanced Store Locator WP Go Maps Editor (Back-end Screenshots) Visitor Generated Markers – (WP Go Maps VGM Add-on) Custom Map Styling (WP Go Maps Gold Add-on) Documentation Installing WP Go Maps Creating your first map Adding a map block to your page or post Google Maps mashup (Pro) Exporting and importing map markers (Pro) Changing the Google Maps language Create a google map and marker using custom fields (Pro) View all documentation Troubleshooting My Google Map is not showing on my website My markers are not showing View all troubleshooting articles

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C