Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Wp Map Block Project Component: Wp Map Block Clear all filters
TI-2025-04660 CVE-2025-5194 · GHSA-rq2w-5j2m-4vvq

WP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker

Priority MEDIUM 55

The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00239 Published 2025-06-27 Fixed in 2.0.3 CWE-79
TI-2021-06926 CVE-2021-24643 · GHSA-56c6-mvcm-ch4r

WP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-27 Fixed in 1.2.3 CWE-79