Better stated, “We were notified of a vulnerability today. It appears you maintain and update this plugin regularly. Were you aware of this vulnerability and will you be addressing it in the near future?”
Hi @winniezz & @ccbackus,
We work closely with Patchstack to keep track of all reported vulnerabilities and solve them as quickly as possible, usually within 48 hours of their report.
The report shared here was originally opened on 18 Dec, 2025, however we do not have access to the report details within our Patchstack dashboard, nor do we see it linked in our official VDP: https://patchstack.com/database/wordpress/plugin/wp-google-maps/vulnerabilities
This isn’t to dismiss the claims, but rather to show that we don’t have any actionable path for this one at the moment. I believe this may be a duplicate report of a similar case from Nov, 2025 which was patched.
I’m reaching out to our contacts at Patchstack to get a bit more clarity in this regard. As soon as we know more about this issue and specifically the reported issue we will address it as soon as possible and I will reply to this thread to keep you updated.
Thank you for your time.
Hi @winniezz & @ccbackus,
We have spoken to the Patchstack team and access information about the report, this is now going into testing on our side and a patch if applicable will be actioned and released as soon as possible.
Please bear in mind the patch does need to be verified and tested before it can be released.
Hi all,
Our initial patch (10.1.05) was incomplete, however, we have corrected this in 10.1.06 which should be available in a few hours.
Hi @winniezz & @ccbackus ,
Just an update to let you know that this has been patched fully, and the patch has been confirmed in the original report as well.
Hi,
Thank you so much for this great support, sorry for initial message that was a little bit rough.
Yours,
Hi @winniezz,
Not at all, thank you for bringing it to our attention!
All the best!
