flippercode vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20234
3. 20242
4. 20251
5. 20268

Newest CVEs

• CVE-2026-13179

  WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter

  flippercode · WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings

  Medium6.4
• CVE-2026-13456

  WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter

  flippercode · WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings

  High7.5
• CVE-2026-9594

  WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter

  flippercode · WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters

  Medium4.4
• CVE-2026-8732

  WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action

  flippercode · WP Maps Pro

  Critical9.8
• CVE-2025-13364

  WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode

  flippercode · WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters

  Medium6.4
• CVE-2026-2580

  WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter

  flippercode · WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters

  High7.5
• CVE-2026-3222

  WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameter

  flippercode · WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters

  High7.5
• CVE-2025-12062

  WP Maps <= 4.8.6 - Authenticated (Subscriber+) Limited Local File Inclusion

  flippercode · WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters

  High8.8
• CVE-2025-39465

  WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability

  flippercode · Advanced Google Maps

  Medium4.3
• CVE-2024-11896

  Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

  flippercode · Text Prompter – Unlimited chatgpt text prompts for openai tasks

  Medium6.4