Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-39674 EUVD-2026-20353GHSA-89qm-qc7r-hmwp

WordPress MK Google Directions plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Manoj Kumar MK Google Directions google-distance-calculator allows DOM-Based XSS.This issue affects MK Google Directions: from n/a through <= 3.1.1.

Affected products

VendorProductAffectedFixed
Manoj Kumar MK Google Directions ≤ 3.1.1 —

References