Read the docs

Dylan Kuhn

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Dylan Kuhn records in CISA KEV

No Dylan Kuhn vulnerabilities are listed in CISA KEV.

Records

11 records

TI-2025-30619 CVE-2025-48293 · GHSA-fp36-rj7g-fmm6

WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability

Priority MEDIUM 49

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows PHP Local File Inclusion.This issue affects Geo Mashup: fro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00475 Published 2025-08-14 No fix listed CWE-98
TI-2026-78804 CVE-2026-111848 · GHSA-wcr6-r38v-74h5

Reflected cross-site scripting in WordPress Geo Mashup plugin

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00202 Published 2026-10-21 No fix listed CWE-79
TI-2026-30957 CVE-2026-42734 · GHSA-jh8h-gfc6-89v8

WordPress Geo Mashup plugin <= 1.13.19 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through <= 1.13.19.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0018 Published 2026-05-27 No fix listed CWE-79
TI-2026-80327 CVE-2026-115953 · GHSA-3x9f-gjpx-5wm8

Stored cross-site scripting in WordPress Geo Mashup plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through 1.13.22.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-26 No fix listed CWE-79
TI-2026-80328 CVE-2026-115954 · GHSA-25r5-fxc8-5cj2

Missing authorization in WordPress Geo Mashup plugin

Priority LOW 24

Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Geo Mashup: from n/a through 1.13.22.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00179 Published 2026-10-26 No fix listed CWE-862
Open these records in search →