WordPress Placemarks plugin version 2.0.0 suffers from a persistent cross site scripting vulnerability.