Title: Broken access control
Last modified: July 22, 2026

---

# Broken access control

 *  Resolved [winniezz](https://wordpress.org/support/users/winniezz/)
 * (@winniezz)
 * [2 weeks, 2 days ago](https://wordpress.org/support/topic/broken-access-control-11/)
 * [https://patchstack.com/database/wordpress/plugin/wp-google-maps/vulnerability/wordpress-wp-go-maps-plugin-10-1-04-broken-access-control-vulnerability](https://patchstack.com/database/wordpress/plugin/wp-google-maps/vulnerability/wordpress-wp-go-maps-plugin-10-1-04-broken-access-control-vulnerability)
 * Hi, do you plan to fix this ?
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fbroken-access-control-11%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 7 replies - 1 through 7 (of 7 total)

 *  [ccbackus](https://wordpress.org/support/users/ccbackus/)
 * (@ccbackus)
 * [2 weeks, 2 days ago](https://wordpress.org/support/topic/broken-access-control-11/#post-18972454)
 * Better stated, “We were notified of a vulnerability today. It appears you maintain
   and update this plugin regularly. Were you aware of this vulnerability and will
   you be addressing it in the near future?”
 *  Plugin Author [DylanAuty](https://wordpress.org/support/users/dylanauty/)
 * (@dylanauty)
 * [2 weeks, 2 days ago](https://wordpress.org/support/topic/broken-access-control-11/#post-18972683)
 * Hi [@winniezz](https://wordpress.org/support/users/winniezz/) & [@ccbackus](https://wordpress.org/support/users/ccbackus/),
 * We work closely with **Patchstack** to keep track of all reported vulnerabilities
   and solve them as quickly as possible, usually within 48 hours of their report.
 * The report shared here was originally opened on **18 Dec, 2025**, however we 
   do not have access to the report details within our Patchstack dashboard, nor
   do we see it linked in our official **VDP: **[https://patchstack.com/database/wordpress/plugin/wp-google-maps/vulnerabilities](https://patchstack.com/database/wordpress/plugin/wp-google-maps/vulnerabilities)
 * This isn’t to dismiss the claims, but rather to show that we don’t have any actionable
   path for this one at the moment. I believe this may be a duplicate report of 
   a similar case from Nov, 2025 which was patched.
 * I’m reaching out to our contacts at **Patchstack** to get a bit more clarity 
   in this regard. As soon as we know more about this issue and specifically the
   reported issue we will address it as **soon as possible** and I will reply to
   this thread to keep you updated.
 * Thank you for your time.
 *  Plugin Author [DylanAuty](https://wordpress.org/support/users/dylanauty/)
 * (@dylanauty)
 * [2 weeks, 1 day ago](https://wordpress.org/support/topic/broken-access-control-11/#post-18972777)
 * Hi [@winniezz](https://wordpress.org/support/users/winniezz/) & [@ccbackus](https://wordpress.org/support/users/ccbackus/),
 * We have spoken to the Patchstack team and access information about the report,
   this is now going into testing on our side and a patch if applicable will be 
   actioned and released as soon as possible.
 * Please bear in mind the patch does need to be verified and tested before it can
   be released.
 *  Plugin Author [DylanAuty](https://wordpress.org/support/users/dylanauty/)
 * (@dylanauty)
 * [2 weeks, 1 day ago](https://wordpress.org/support/topic/broken-access-control-11/#post-18973161)
 * Hi all,
 * Our initial patch (10.1.05) was incomplete, however, we have corrected this in**
   10.1.06** which should be available in a few hours.
 *  Plugin Author [DylanAuty](https://wordpress.org/support/users/dylanauty/)
 * (@dylanauty)
 * [2 weeks, 1 day ago](https://wordpress.org/support/topic/broken-access-control-11/#post-18973670)
 * Hi [@winniezz](https://wordpress.org/support/users/winniezz/) & [@ccbackus](https://wordpress.org/support/users/ccbackus/),
 * **Just an update** to let you know that this has been patched fully, and the 
   patch has been confirmed in the original report as well.
 *  Thread Starter [winniezz](https://wordpress.org/support/users/winniezz/)
 * (@winniezz)
 * [2 weeks ago](https://wordpress.org/support/topic/broken-access-control-11/#post-18973773)
 * Hi,
 * Thank you so much for this great support, sorry for initial message that was 
   a little bit rough.
 * Yours,
 *  Plugin Author [DylanAuty](https://wordpress.org/support/users/dylanauty/)
 * (@dylanauty)
 * [2 weeks ago](https://wordpress.org/support/topic/broken-access-control-11/#post-18973775)
 * Hi [@winniezz](https://wordpress.org/support/users/winniezz/),
 * Not at all, thank you for bringing it to our attention!
 * All the best!

Viewing 7 replies - 1 through 7 (of 7 total)

You must be [logged in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fbroken-access-control-11%2F%3Foutput_format%3Dmd&locale=en_US)
to reply to this topic.

 * ![](https://ps.w.org/wp-google-maps/assets/icon-256x256.gif?rev=3576706)
 * [WP Go Maps - Google Map, OpenStreetMap, Leaflet Map](https://wordpress.org/plugins/wp-google-maps/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wp-google-maps/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wp-google-maps/)
 * [Active Topics](https://wordpress.org/support/plugin/wp-google-maps/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wp-google-maps/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wp-google-maps/reviews/)

 * 9 replies
 * 4 participants
 * Last reply from: [DylanAuty](https://wordpress.org/support/users/dylanauty/)
 * Last activity: [2 weeks ago](https://wordpress.org/support/topic/broken-access-control-11/#post-18973775)
 * Status: resolved