Volerion logoVolerion
Volerion logoVolerion

Actively Exploited in the Wild

This vulnerability is being actively exploited in the wild.

10Web Map Builder for Google Maps Stored Cross-Site Scripting Vulnerability

Vulnerability

A stored cross-site scripting vulnerability has been identified in the 10Web Map Builder for Google Maps WordPress plugin, affecting versions through 1.0.63. The issue arises from inadequate input sanitization and output escaping, coupled with a lack of capability checks, allowing unauthenticated attackers to inject arbitrary scripts into pages. These scripts execute when a user accesses the compromised page.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the page.

Remediation

Users are advised to update the 10Web Map Builder for Google Maps plugin to version 1.0.64 or later.

Added: Oct 18, 2025, 4:20 AM
Updated: Oct 18, 2025, 4:20 AM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
1.3
exploitability
9.3
remediation
7.7
relevance
0.7
threat
8.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.