Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8.6 via the fc_load_template function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .html files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .html file types can be uploaded and included.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-16 | 1 | Disclosure1 |
| 2026-02-17 | 4 | Disclosure4 |
| 2026-02-22 | 1 | Disclosure1 |
CVE-2025-12062 Local File Inclusion in WP Maps WordPress Plugin via fc_load_template Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-12062
Post summary
The text reports the disclosure of CVE‑2025‑12062, a local file inclusion flaw in the WP Maps WordPress plugin through the fc_load_template function. No proof‑of‑concept, exploit, active exploitation, patch, or false‑positive claim is provided.
@VulmonFeeds 🚨 **CVE-2025-12062** is a **Local File Inclusion (LFI)** vulnerability in the **WP Maps – Store Locator, Google Maps, OpenStreetMap, Mapbox, Listing, Directory & Filters** WordPress plugin, affecting all versions up to and including **4.8.6**. #WordPress #LFI
Post summary
CVE-2025-12062 is a Local File Inclusion vulnerability affecting the WP Maps plugin up to version 4.8.6; no exploitation, patches, or false‑positive claims are mentioned.
CVE-2025-12062 The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up… https://www.cve.org/CVERecord?id=CVE-2025-12062
Post summary
The text announces a local file inclusion vulnerability (CVE‑2025‑12062) in the WP Maps plugin, linking to its CVE record but providing no further exploitation or mitigation details.
CVE-2025-12062 (CVSS:8.8, HIGH) is Awaiting Analysis. The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnera..https://nvd.nist.gov/vuln/detail/CVE-2025-12062 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2025-12062 is a high‑severity vulnerability in the WP Maps plugin, currently awaiting analysis, with no PoC, exploit, or patch details provided.
⚡ New CVE Alert: CVE-2025-12062 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-12062 #CVE-2025-12062 #CVE #High #Wordpress #CyberSecurity #InfoSec https://t.co/F1cPYBo787
Post summary
The tweet announces a newly disclosed high‑severity WordPress vulnerability (CVE‑2025‑12062) and directs readers to the NVD for details.
🟠 CVE-2025-12062 - High The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8... https://www.thehackerwire.com/vulnerability/CVE-2025-12062/ https://t.co/B9GLhw1LLi
Post summary
The tweet announces CVE‑2025‑12062, a Local File Inclusion vulnerability affecting WP Maps plugin versions up to 4.8. No PoC, exploit, or patch details are provided.