Read the docs

hupe13

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

hupe13 records in CISA KEV

No hupe13 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Extensions For Leaflet Map 1 record LOW

Records

8 records

TI-2026-41317 CVE-2026-57380 · GHSA-hcmc-pmcf-c73g

WordPress Extensions for Leaflet Map plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leafle…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
TI-2026-79243 CVE-2026-114703 · GHSA-hrmh-fm6j-2wgj

Stored cross-site scripting in Extensions for Leaflet Map plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet M…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-22 No fix listed CWE-79
TI-2026-04773 CVE-2026-5451 · GHSA-f684-x2p3-9qp3

Cross-site scripting in hupe13 Extensions for Leaflet Map

Priority LOW 28

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elevation-track' shortcode in all versions up to, and including, 4.14.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00209 Published 2026-04-08 No fix listed CWE-79
TI-2026-03817 CVE-2026-4389 · GHSA-p529-4vj7-h7jm

Cross-site scripting in hupe13 DSGVO snippet for Leaflet Map and its Extensions

Priority LOW 28

The DSGVO snippet for Leaflet Map and its Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `leafext-cookie-time` and `leafext-delete-cookie` shortcodes in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00244 Published 2026-03-26 No fix listed CWE-79
TI-2025-40618 CVE-2025-66093 · GHSA-4p72-hvvm-vvpj

WordPress Extensions for Leaflet Map plugin <= 4.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leafle…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-11-21 No fix listed CWE-79
TI-2026-82324 CVE-2026-103485 · GHSA-7vcm-wxx6-q65r

Stored DOM-based XSS in Extensions for Leaflet Map WordPress plugin

Priority LOW 24

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feature.properties[<template-token>]' parameter in all versions up to, and including, 5.4 due to insuffi…

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00341 Published 2026-10-29 No fix listed CWE-79
Open these records in search →