Vulnerabilities and security researches forwp-map-block wp-map-block

Jun 07, 2024

CVE, Research URL: CVE-2021-24643
Home page URL: Security reports for WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map
Application: WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map
Date: Sep 27, 2021
Research Description: The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
Affected versions: max 1.2.3.
Status: vulnerable

Jul 04, 2025

CVE, Research URL: CVE-2025-5194
Home page URL: Security reports for WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map
Application: WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map
Date: Jun 27, 2025
Research Description: WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters [wp-map-block] < 2.0.3 WP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected versions: max 2.0.3.
Status: vulnerable

Oct 17, 2026

CVE, Research URL: CVE-2026-19798
Home page URL: Security reports for WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map
Application: WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map
Date: -
Research Description: WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters [wp-map-block] < 3.1.0 CVE-2026-19798
Affected versions: max 3.1.0.
Status: vulnerable