WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' Shortcode
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO
Minimum safe version
1.1.9
Update to 1.1.9 or later to address 8 fixable vulnerabilities
Latest available1.1.9 ✓
N/A
2026-01-08< 1.1.9
Medium 5.9
2025-03-27< 1.1.6
CVE-2025-30799
Medium 6.4
2025-01-24< 1.1.4
CVE-2024-13542
Medium 6.3
2024-10-16< 1.0.9
Freemius SDK <= 2.4.2 - Missing Authorization Checks
N/A
2023-07-18< 1.1.1
WordPress WP Google Street View (with 360° virtual tour) & Google maps + Local SEO Plugin < 1.1.1 is vulnerable to Cross Site Scripting (XSS)
N/A
2022-03-04< 1.0.9
Freemius SDK <= 2.4.2 - Missing Authorization Checks
N/A
2022-02-28< 1.0.9
WordPress WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin <= 1.0.8 - Sensitive Information Disclosure vulnerability
N/A
2022-02-28< 1.0.9
WordPress WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin <= 1.0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability