CVE-2023-6627 (published 2024-01-08T19:00:30.023Z)
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.28 does not properly protect most of its REST API routes, which attackers can abuse to store malicious HTML/Javascript on the site.
Affected products: Vendor: Unknown
Product: WP Go Maps (formerly WP Google Maps)
Versions: 0