CVE-2021-24502: Weplugins Wp Maps

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scripting issue by high privilege users, even when the unfiltered_html capability is disallowed

Affected products

• Weplugins Wp Maps: before 1.7.7 (fixed in 1.7.7)

Published 2021-08-09. Last modified 2026-06-17.