Read the docs

Wp Map Block Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Map Block Project records in CISA KEV

No Wp Map Block Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Map Block 2 records MEDIUM

Records

2 records in Wp Map Block · all components

TI-2025-04660 CVE-2025-5194 · GHSA-rq2w-5j2m-4vvq

WP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker

Priority MEDIUM 55

The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00239 Published 2025-06-27 Fixed in 2.0.3 CWE-79
TI-2021-06926 CVE-2021-24643 · GHSA-56c6-mvcm-ch4r

WP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-27 Fixed in 1.2.3 CWE-79
Open these records in search →