WP Maps vulnerabilities
We track 2 vulnerabilities in WP Maps products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest WP Maps vulnerabilities
- 8.8 High severity
WP Maps: Improper Limitation of a Pathname to a Restricted Directory
The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to include and execute
- 7.5 High severity
WP Maps: Improper Limitation of a Pathname to a Restricted Directory
The WP Maps WordPress plugin before 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inclusion attacks.