CVE Catalog
CVE-2026-73366
CriticalCVSS 9.8Summary
Unauthenticated PHP Object Injection vulnerability in Easy Google Maps plugin versions up to 1.13.0. An attacker without authentication can inject PHP objects, potentially leading to remote code execution.
Risk Assessment
Potential for remote code execution on the server, which may result in full system compromise.
Recommendation
Update the Easy Google Maps plugin to a version newer than 1.13.0.
Original NVD description (English source)
Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.