CVE-2025-11703

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cache Poisoning in all versions up to, and including, 9.0.48. This is due to the plugin not serving cached data from server-side responses and instead relying on user-input. This makes it possible for unauthenticated attackers to poison the cache location for location search results.

• CWE-349

• https://github.com/CodeCabin/wp-google-maps/pull/1087/files
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3378871%40wp-google-maps&new=3378871%40wp-google-maps&sfp_email=&sfph_mail=
• https://research.cleantalk.org/cve-2025-11703
• https://www.wordfence.com/threat-intel/vulnerabilities/id/531360c6-e78a-4344-be06-95735337a2d6?source=cve

Published

Oct 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11698A denial-of-service issue exists in 5380/5480/5580 controlle…9.2
• CVE-2025-11699nopCommerce v4.70 and prior, and version 4.80.3, does not in…7.1
• CVE-2025-1170A vulnerability classified as problematic has been found in …5.4
• CVE-2025-11700N-central versions < 2025.4 are vulnerable to multiple XML E…7.5
• CVE-2025-11701The Zip Attachments plugin for WordPress is vulnerable to un…5.3
• CVE-2025-11702GitLab has remediated an issue in EE affecting all versions …8.8
• CVE-2025-11704The Elegance Menu plugin for WordPress is vulnerable to Loca…7.5
• CVE-2025-11705The Anti-Malware Security and Brute-Force Firewall plugin fo…6.5
• CVE-2025-11706The Aruba HiSpeed Cache plugin for WordPress is vulnerable t…6.1
• CVE-2025-11707The Login Lockdown & Protection plugin for WordPress is vuln…5.3
• CVE-2025-11708Use-after-free in MediaTrackGraphImpl::GetInstance(). This v…9.8
• CVE-2025-11709A compromised web process was able to trigger out of bounds …9.8