WordPress WP Go Maps Plugin <= 10.1.08 is vulnerable to Denial of Service Attack

Low priority No impactful threat
<= 10.1.08Vulnerable version(s)
10.1.09Patched version
WordPress Plugin
Active VDP
2 Sep, 2026 by Patchstack

Get the fastest vulnerability mitigation with Patchstack!

Get started

Risks

CVSS 5.3

As immediate action, update the affected plugin. If you're unable to do so, ask your hosting provider or web developer for help.

5.3

Denial of Service Attack

A denial of service attack occurs when a malicious actor can cause the endpoint, or website, to crash or refuse to serve requests to one or more users by causing it to hang, crash or make unusable.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

Solutions

This security issue has a low severity impact and is unlikely to be exploited.

Update to version 10.1.09 or later.

Update to version 10.1.09 or later to resolve the vulnerability. Patchstack users can turn on auto-update for vulnerable plugins only.

Details

Have additional information or questions about this entry? Let us know.
Go to
WordPress Plugin
Active VDP

Timeline

Reported byProfile ImageAsim Alshaya

28 Aug, 2026

Early warning sent out to Patchstack customers

2 Sep, 2026

Published by Patchstack

2 Sep, 2026

Weekly WordPress security intelligence delivered to your inbox.