CVE-2025-11703Medium· 5.3▾ SunlitThe WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cache Poisoning in all versions up to, and including, 9.0.48. This is due to the plugin not serving cached data from server-side responses and instead relying…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cache Poisoning in all versions up to, and including, 9.0.48. This is due to the plugin not serving cached data from server-side responses and instead relying on user-input. This makes it possible for unauthenticated attackers to poison the cache location for location search results.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-40778High· 8.6Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 th…
CVE-2025-11411NoneNLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks
CVE-2026-48100High· 8.7Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions
CVE-2026-32162High· 8.4Windows COM Elevation of Privilege Vulnerability
CVE-2026-95985High· 8.8The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context
CVE-2026-45602Critical· 9.1Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability