The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that an administrator has not yet approved for public display, including any PII placed in the address and description fields and the marker's geographic coordinates.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Google Maps Plugin | — | Update wp-google-maps plugin to version 10.0.10, or a newer patched version | Oct 30, 2026 | May 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub