Sensitive Data Exposure in WP Maps by Flipper Code
CVE-2026-28144

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
WP Maps
Vendor
CVE Published:
31 July 2026

What is CVE-2026-28144?

The WP Maps plugin developed by Flipper Code exhibits a vulnerability that allows for the insertion and retrieval of sensitive information embedded within sent data. This issue affects versions up to 4.9.6 of the WP Maps plugin. If exploited, it could lead to unauthorized access to sensitive data, increasing the risk of data breaches and privacy violations. Users of affected versions should consider updating their plugin to mitigate these risks.

Affected Version(s)

WP Maps <= 4.9.6

References

https://patchstack.com/database/wordpress/plugin/wp-googl...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal | Patchstack
.