CVE-2026-73367
Received Received - Intake

Unauthenticated Remote File Inclusion in Easy Google Maps

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Patchstack

Description
Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
CVE-2026-73367
EUVD
EUVD-2026-60789

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
patchstack easy_google_maps to 1.14.2 (exc)
easy_google_maps easy_google_maps to 1.14.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-829 The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an Unauthenticated Remote File Inclusion (RFI) vulnerability in the Easy Google Maps WordPress plugin versions below 1.14.2. It allows attackers to include and execute external files or scripts on the website without authentication, potentially leading to backdoor creation or full site takeover.

Detection Guidance

Check if the Easy Google Maps plugin version is below 1.14.2 using WordPress admin panel or run: wp plugin list | grep easy-google-maps in WP-CLI. Monitor for unexpected file inclusions or script executions in web server logs.

Impact Analysis

An attacker could exploit this to take control of your website, install malicious scripts, or steal sensitive data. Since it requires no authentication, any unpatched website using the vulnerable plugin is at high risk of compromise.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR and HIPAA requirements for data protection. Non-compliance may result in legal penalties, reputational damage, and loss of trust from users or customers.

Mitigation Strategies

Update the Easy Google Maps plugin to version 1.14.2 or later immediately. Apply Patchstack's mitigation rule if available until the update is completed. Review server logs for signs of exploitation and remove any unauthorized files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73367. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart