Known CVE

WP Google Maps < 9.0.48 - Cross-Site Scripting

WP Google Maps WordPress plugin < 9.0.48 contains a stored XSS vulnerability caused by unsanitized user input in AJAX actions, letting unauthenticated attackers execute scripts via stored payloads.

CVE-2025-11307

High2025CVSS 8.8CWE-79

cve2025 · wp · wordpress · wp-plugin · xss · cache-poisoning · vkev

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website