References https://www.anquanke.com/post/id/248716 https://avd.aliyun.com/detail?id=AVD-2021-30551 https://geeknb.com/18128.html https://www.ithome.com.tw/news/144947 https://www.ruijie.com.cn/cp/xw-cp-aq-ipswxbk/50608 https://www.venustech.com.cn/new_type/aqtg/20210611/22785.html http://hncfs.edu.cn/wlxxzx/info/1008/1072.htm http://nic.cqrk.edu.cn/2021_07/28_08/content-23104.html http://nic.jiangnan.edu.cn/info/1102/3391.htm https://www.secrss.com/articles/34939
Related VulnerabilitiesPoCgoogle-api-key: Google API KeyWP Google 地图 < 9.0.48 - 未经身份验证的存储 XSS (CVE-2025-11307)PoCCVE-2026-8732: WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account CreationPoCCVE-2026-4810: Google ADK-Python - Unauthenticated Builder EndpointPoCgoogle-gemini-key-exposure: Google Gemini API Key - ExposurePoCCVE-2024-13220: WordPress Google Map Professional - Cross-Site ScriptingPoCfreshrss-api: FreshRSS Google Reader API ExposurePoCgcloudignore-file-exposure: Google Cloud Ignore File ExposurePoCgoogle-calendar-exposure: Google Calendar - ExposurePoCwp-duracelltomi-google-tag-manager-fpd: WordPress Plugin Google Tag Manager - Full Path DisclosurePoCwp-googlecaptcha-fpd: WordPress Plugin reCaptcha by BestWebSoft (google-captcha) - Full Path DisclosurePoCCVE-2025-12139: Integrate Google Drive <= 1.5.3 - Information DisclosurePoCgcs-bucket-listing: Google Cloud Storage - Public Bucket Listing