Vulnerabilities and security researches foryamaps yamaps

Jun 07, 2024

CVE, Research URL: CVE-2023-0270
Home page URL: Security reports for YaMaps for WordPress Plugin
Application: YaMaps for WordPress Plugin
Date: Feb 13, 2023
Research Description: The YaMaps for WordPress Plugin WordPress plugin before 0.6.26 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected versions: Min -, max -.
Status: vulnerable

Aug 13, 2024

CVE, Research URL: CVE-2024-43224
Home page URL: Security reports for YaMaps for WordPress Plugin
Application: YaMaps for WordPress Plugin
Date: Aug 13, 2024
Research Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yuri Baranov YaMaps for WordPress allows Stored XSS.This issue affects YaMaps for WordPress: from n/a through 0.6.27.
Affected versions: Min -, max -.
Status: vulnerable

Apr 06, 2025

CVE, Research URL: CVE-2025-32172
Home page URL: Security reports for YaMaps for WordPress Plugin
Application: YaMaps for WordPress Plugin
Date: Apr 04, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yuri Baranov YaMaps for WordPress allows Stored XSS. This issue affects YaMaps for WordPress: from n/a through 0.6.31.
Affected versions: Min -, max -.
Status: vulnerable