Cross-site Scripting

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vect…CVE-2018-0577Flipper Code · 0.8% likely

   CWE-79

2. WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-23878flippercode · CVSS 5.9 · 0.4% likely

   CWE-79

3. Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-11896flippercode · CVSS 6.4 · 0.3% likely

   CWE-79

4. WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values ParameterCVE-2026-13179flippercode · CVSS 6.4 · 0.3% likely

   CWE-79

5. WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' ParameterCVE-2026-9594flippercode · CVSS 4.4 · 0.3% likely

   CWE-79

6. WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' ShortcodeCVE-2025-13364flippercode · CVSS 6.4 · 0.3% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.