Unknown Wp Go Maps vulnerabilities

3 CVEs affecting Unknown Wp Go Maps, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15381, published 2026-07-31.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-8386, published 2026-06-15. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that…
• CVE-2026-8385, published 2026-06-15. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. The WP Go Maps WordPress plugin before 10.0.10 does not properly enforce the marker approval filter on the admin-ajax fallback for its datatables route, allowing unauthenticated visitors to retrieve…
• CVE-2026-15381, published 2026-07-31. Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days. The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.