CVE-2026-57767

The vulnerability allows unauthenticated cross-site scripting (XSS) in WP Google Maps Pro versions up to 10.1.02, potentially enabling attackers to execute arbitrary scripts in the context of users' browsers. This can lead to session hijacking, data theft, or defacement of web pages. Organizations using affected versions of this plugin should prioritize patching to mitigate the risk of exploitation.