Skip to content
OpenAdvisories

Vendor

flippercode

16 known vulnerabilities.

Products

WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters 5 WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings 2 WordPress Plugin for Google Maps – WP MAPS 1 Advanced Google Maps 1 WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) 1 WP Security Question 1 WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters 1 Custom css-js-php 1 WP Maps Pro 1 Text Prompter – Unlimited chatgpt text prompts for openai tasks 1 WP Google Map Plugin (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-13179

    WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter

    The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shapes_values Parameter in all versions up to, and including, 4.9.8 due to insufficient input saniti…

    flippercode WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings Web / CMS
  • Medium 4.4
    CVE-2026-9594

    WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter

    The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'location_messages' parameter in all versions up to, and including, 4.9.4 due to insufficient in…

    flippercode WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters Web / CMS
  • Medium 6.4
    CVE-2025-13364

    WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode

    The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'put_wpgm' shortcode in all versions up to, and including, 4.8.7. This is due to insufficient in…

    flippercode WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters Web / CMS
  • Medium 4.3
    CVE-2025-39465

    WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through <= 5.8.4.

    flippercode Advanced Google Maps
  • Medium 6.4
    CVE-2024-11896

    Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Text Prompter – Unlimited chatgpt text prompts for openai tasks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'text_prompter' shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization…

    flippercode Text Prompter – Unlimited chatgpt text prompts for openai tasks Web / CMS
  • Medium 5.4
    CVE-2023-28172

    WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) plugin <= 4.4.2 versions.

    flippercode WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) Web / CMS
  • Medium 4.3
    CVE-2021-4418

    Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypass

    The Custom CSS, JS & PHP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.7. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticated attacker…

    flippercode Custom css-js-php Web / CMS
  • Medium 4.3
    CVE-2021-4386

    WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass

    The WP Security Question plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.5. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticated attacker…

    flippercode WP Security Question Web / CMS
  • Medium 5.9
    CVE-2023-23878

    WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS)

    Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin <= 4.3.9 versions.

    flippercode WordPress Plugin for Google Maps – WP MAPS Web / CMS
  • Medium 5.4
    CVE-2022-25600

    WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <= 4.2.3).

    flippercode WP Google Map Plugin (WordPress plugin) Web / CMS