Cross-site Scripting

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. WP Google Maps < 7.10.43 - Cross-Site ScriptingCVE-2019-9912Codecabin · 3.1% likely

   CWE-79

2. WP Pricing Table - Reflected XSSCVE-2024-13628Codecabin · CVSS 6.1 · 0.7% likely

   CWE-79

3. Multiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the…CVE-2014-7182Codecabin · 2.5% likely

   CWE-79

4. Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2017-2187CODECABIN_ · 1.3% likely

   CWE-79

5. The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.CVE-2019-14792Codecabin · 1.1% likely

   CWE-79

6. WP Go Maps < 9.0.28 - Unauthenticated Stored XSSCVE-2023-6627Codecabin · CVSS 6.1 · 0.6% likely

   CWE-79

7. WordPress WP Google Maps plugin <= 8.1.12 - Multiple Authenticated Persistent XSS vulnerabilitiesCVE-2021-36870Code Cabin Inc · CVSS 5.5 · 0.6% likely

   CWE-79

8. WordPress WP Google Maps Pro premium plugin <= 8.1.11 - Multiple Authenticated Persistent XSS vulnerabilitiesCVE-2021-36871Code Cabin Inc · CVSS 5.5 · 0.6% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.