Cross-site Scripting

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions.CVE-2015-9305Weplugins · 1.0% likely

   CWE-79

2. The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS.CVE-2016-10878Weplugins · 1.0% likely

   CWE-79

3. WP Google Map < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-24502Weplugins · 0.7% likely

   CWE-79

4. WP Maps < 4.7.2 - Admin+ Stored XSSCVE-2025-3502Weplugins · CVSS 3.5 · 0.3% likely

   CWE-79

5. WP Maps < 4.7.2 - Admin+ Stored XSSCVE-2025-3503Weplugins · CVSS 4.5 · 0.3% likely

   CWE-79

6. WP Maps < 4.7.2 - Admin+ Stored XSSCVE-2025-3504Weplugins · CVSS 3.5 · 0.3% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.