TI-2025-06993 CVE-2025-7660 · GHSA-3r24-qx7j-4fr4
Map My Locations <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The Map My Locations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'map_my_locations' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and ou…