WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters

Vulnerabilities 26Slug wp-google-map-pluginLatest version 4.9.4WordPress.org →

Minimum safe version

4.9.2

Update to 4.9.2 or later to address 26 fixable vulnerabilities

Latest available4.9.4 ✓
N/A
2025-04-10< 4.7.2

WP Maps – Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting

WordfenceCVE
N/A
2026-04-08< 4.9.2

WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection

WordfenceCVE
N/A
2026-03-10< 4.9.2

WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameter

WordfenceCVE
N/A
2026-03-22< 4.9.2

WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter

WordfenceCVE
Medium 4.5
2025-05-01< 4.7.2

WP Maps – Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 4.8
2025-05-01< 4.7.2

WordPress WP Google Map Plugin Plugin < 4.7.2 is vulnerable to Cross Site Scripting (XSS)

PatchstackWordfenceCVE
High 8.8
2024-07-01< 4.6.2

WordPress WP Google Map Plugin Plugin <= 4.6.1 is vulnerable to SQL Injection

PatchstackCVEWordfence
N/A
< 3.0.0

WP Google Map Plugin &lt; 3.0.0 - CSRF to Authenticated Cross-Site Scripting (XSS)

WPScan
N/A
< 4.1.0

WP Google Map Plugin &lt; 4.1.0 - CSRF to Unauthenticated PHP Object Injection

WPScan
N/A
2015-08-20< 3.0.0

WP Google Map Plugin < 3.0.0 - Cross-Site Request Forgery to Cross-Site Scripting

Wordfence
N/A
2019-09-21< 4.1.0

WP Google Map Plugin <= 4.0.9 - Cross-Site Request Forgery to PHP Object Injection

Wordfence
N/A
2019-09-21< 4.1.0

WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.0.9 - Reflected Cross-Site Scripting

Wordfence
N/A
2020-11-25< 4.1.4

WordPress WP Google Map Plugin <= 4.1.3 - Authenticated SQL Injection (SQLi) vulnerability

Patchstack