PatchTheCVE: mapspluginhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2014-9686: The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belongihttps://patchthecve.com/cve/CVE-2014-9686.htmlhttps://patchthecve.com/cve/CVE-2014-9686.htmlWed, 17 Jun 2026 00:18:48 +0000MEDIUM 5.9: The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googlemap3_kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428.CVE-2013-7429: The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the https://patchthecve.com/cve/CVE-2013-7429.htmlhttps://patchthecve.com/cve/CVE-2013-7429.htmlWed, 17 Jun 2026 00:01:56 +0000CRITICAL 9.8: The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.CVE-2013-7428: The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url https://patchthecve.com/cve/CVE-2013-7428.htmlhttps://patchthecve.com/cve/CVE-2013-7428.htmlWed, 17 Jun 2026 00:01:56 +0000HIGH 7.5: The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugin_googlemap2_proxy.php.CVE-2013-7433: Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.https://patchthecve.com/cve/CVE-2013-7433.htmlhttps://patchthecve.com/cve/CVE-2013-7433.htmlWed, 17 Jun 2026 00:01:56 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.CVE-2013-7432: The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanishttps://patchthecve.com/cve/CVE-2013-7432.htmlhttps://patchthecve.com/cve/CVE-2013-7432.htmlWed, 17 Jun 2026 00:01:56 +0000HIGH 7.5: The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism.CVE-2013-7431: Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!.https://patchthecve.com/cve/CVE-2013-7431.htmlhttps://patchthecve.com/cve/CVE-2013-7431.htmlWed, 17 Jun 2026 00:01:56 +0000MEDIUM 5.3: Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!.CVE-2013-7430: Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackehttps://patchthecve.com/cve/CVE-2013-7430.htmlhttps://patchthecve.com/cve/CVE-2013-7430.htmlWed, 17 Jun 2026 00:01:56 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter.