CVE-2023-6627: medium-severity vulnerability in WP Go Maps (formerly WP Google Maps)
WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
Published · Updated
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.1epss 0.6%
exploitation probability
0.6%top 52% of all CVEs
observed exploitation
nono source reports it
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.28 does not properly protect most of its REST API routes, which attackers can abuse to store malicious HTML/Javascript on the site.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Unknown · WP Go Maps (formerly WP Google Maps)Related CVEs — WP Go Maps (formerly WP Google Maps)
In the same product, most dangerous first.