Read the docs

photoweblog

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

photoweblog records in CISA KEV

No photoweblog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openstreetmap 5 records MEDIUM

Records

6 records

TI-2024-03359 CVE-2024-3604 · GHSA-vrqh-v8jm-4v2m

OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) SQL Injection

Priority MEDIUM 43

The OSM – OpenStreetMap plugin for WordPress is vulnerable to SQL Injection via the 'tagged_filter' attribute of the 'osm_map_v3' shortcode in all versions up to, and including, 6.0.3 due to insufficient escaping on the…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00528 Published 2024-07-09 No fix listed CWE-89
TI-2024-03358 CVE-2024-3603 · GHSA-vfxc-84q8-h5w2

OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 30

The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'osm_map' shortcode in all versions up to, and including, 6.0.3 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00341 Published 2024-07-09 No fix listed CWE-79
TI-2024-08349 CVE-2024-8991 · GHSA-7q48-m9w3-vrpc

OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes

Priority LOW 29

The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's osm_map and osm_map_v3 shortcodes in all versions up to, and including, 6.1.0 due to insufficient input sanitizat…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00411 Published 2024-09-27 No fix listed CWE-79
TI-2026-03841 CVE-2026-4429 · GHSA-xhg5-7962-f335

OSM <= 6.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker_name' Shortcode Attribute

Priority LOW 28

The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_name' and 'file_color_list' shortcode attribute of the [osm_map_v3] shortcode in all versions up to and including…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00243 Published 2026-04-09 No fix listed CWE-79
Open these records in search →