CVE-2025-5194

Name of the Vulnerable Software and Affected Versions: WP Map Block versions prior to 2.0.3

Description: The issue concerns the WP Map Block WordPress plugin, which does not validate and escape some of its block options before outputting them back in a page or post where the block is embedded. This could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Recommendations: For WP Map Block versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the WP Map Block plugin until a patch is applied, especially for users with the contributor role and above.