CVE-2026-57670 WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
PublishedUnauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions.
Product
2 published CVES affecting codepeople Google Maps CP, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions.
Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.