Vulnerabilities

TI-2026-67989 CVE-2026-39796 · GHSA-gvw4-58xm-3pr9

Broken access control in Advanced Posts Listing WordPress plugin

LOW 39

Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00287 Published 2026-10-06 No fix listed CWE-862

TI-2026-28466 CVE-2026-39492 · GHSA-2fh6-qw9c-8c2g

WordPress WP Maps plugin <= 4.9.1 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00363 Published 2026-06-15 No fix listed CWE-89

TI-2025-41289 CVE-2025-67535 · GHSA-mqq8-cpfh-hpm3

WordPress WP Maps plugin <= 4.8.6 - PHP Object Injection vulnerability

LOW 31

Deserialization of Untrusted Data vulnerability in Flipper Code - WordPress Development Company WP Maps wp-google-map-plugin allows Object Injection.This issue affects WP Maps: from n/a through <= 4.8.6.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00369 Published 2025-12-09 No fix listed CWE-502

Vulnerabilities

Filters

Broken access control in Advanced Posts Listing WordPress plugin

WordPress WP Maps plugin <= 4.9.1 - SQL Injection vulnerability

WordPress WP Maps plugin <= 4.8.6 - PHP Object Injection vulnerability