Flipper Code vulnerabilities

Products

• WP Maps 2

Latest Flipper Code CVEs

Newest publication first

1. CVE-2026-66618 WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability

   Published 2026-09-17

   High·CVSS 7.6

   Administrator SQL Injection in WP Maps <= 4.9.9 versions.

2. CVE-2026-28144 WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability

   Published 2026-07-31

   Medium·CVSS 4.3

   Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.