CVE-2023-6777

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 9.0.34 due to the plugin adding the API key to several plugin files. This makes it possible for unauthenticated attackers to obtain the developer's Google API key. While this does not affect the security of sites using this plugin, it allows unauthenticated attackers to make requests using this API key with the potential of exhausting requests resulting in an inability to use the map functionality offered by the plugin.

• CWE-200

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3058300%40wp-google-maps&new=3058300%40wp-google-maps&sfp_email=&sfph_mail=#file673Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/509cccbd-3aa0-45f1-84a0-387d678ebf65?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3058300%40wp-google-maps&new=3058300%40wp-google-maps&sfp_email=&sfph_mail=#file673Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/509cccbd-3aa0-45f1-84a0-387d678ebf65?source=cveThird Party Advisory

Published

Apr 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6771A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-6772A vulnerability, which was classified as critical, was found…7.2
• CVE-2023-6773A vulnerability has been found in CodeAstro POS and Inventor…8.8
• CVE-2023-6774A vulnerability was found in CodeAstro POS and Inventory Man…5.4
• CVE-2023-6775A vulnerability was found in CodeAstro POS and Inventory Man…6.1
• CVE-2023-6776The 3D FlipBook plugin for WordPress is vulnerable to Stored…5.4
• CVE-2023-6778Cross-site Scripting (XSS) - Stored in GitHub repository all…5.4
• CVE-2023-6779An off-by-one heap-based buffer overflow was found in the __…7.5
• CVE-2023-6780An integer overflow was found in the __vsyslog_internal func…5.3
• CVE-2023-6781The Orbit Fox by ThemeIsle plugin for WordPress is vulnerabl…5.4
• CVE-2023-6782The AMP for WP – Accelerated Mobile Pages plugin for WordPre…5.4
• CVE-2023-6783The WolfNet IDX for WordPress plugin through 1.19.1 does not…4.8