Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WP Go Maps 10.0.10 Clear all filters
TI-2026-07374 CVE-2026-8386 · GHSA-7gcf-rrgh-pw4q

WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID

Priority MEDIUM 63

The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that an administrator has…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.007 Published 2026-06-15 Fixed in 10.0.10
TI-2026-07373 CVE-2026-8385 · GHSA-f9fr-2hr3-67mf

WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback

Priority LOW 31

The WP Go Maps WordPress plugin before 10.0.10 does not properly enforce the marker approval filter on the admin-ajax fallback for its datatables route, allowing unauthenticated visitors to retrieve marker records that t…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00801 Published 2026-06-15 Fixed in 10.0.10 CWE-200