Supsystic

Records88All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high33CVSS 7.0–8.9

Exploited now

Supsystic records in CISA KEV

No Supsystic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Popup 10 records HIGH Easy Google Maps 6 records LOW Social Share Buttons 5 records MEDIUM Contact Form 3 records MEDIUM Data Tables Generator 3 records MEDIUM Photo Gallery 3 records LOW Pricing Table By Supsystic 3 records LOW Digital Publications By Supsystic 2 records LOW

Records

6 records in Easy Google Maps · all components

TI-2023-16798 CVE-2023-33926 · GHSA-chj4-v52q-3v43

WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps plugin <= 1.11.7 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-05-28 No fix listed CWE-352

TI-2024-20645 CVE-2024-31269 · GHSA-jx26-px86-8234

WordPress Easy Google Maps plugin <= 1.11.11 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps.This issue affects Easy Google Maps: from n/a through 1.11.11.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2024-04-12 No fix listed CWE-352

TI-2024-04843 CVE-2024-5219 · GHSA-xj6v-rj9r-jrjq

Easy Google Maps <= 1.11.15 - Authenticated (Author+) Stored Cross-Site Scripting

LOW 30

The Easy Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file upload feature in all versions up to, and including, 1.11.15 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00341 Published 2024-07-02 No fix listed CWE-79

TI-2021-21493 CVE-2021-46780 · GHSA-hgh9-hxx2-hfxf

Easy Google Maps < 1.9.32 - Reflected Cross-Site Scripting

LOW 29

The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-04-25 Fixed in 1.9.32 CWE-79

TI-2023-02367 CVE-2023-2526 · GHSA-g7m7-r5mc-v45v

Easy Google Maps <= 1.11.7 - Cross-Site Request Forgery via AJAX action

LOW 24

The Easy Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.11.7.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00282 Published 2023-06-09 No fix listed CWE-352

TI-2021-16713 CVE-2021-39346 · GHSA-44xv-8ff2-fg74

Google Maps Easy <= 1.9.33 Authenticated Stored Cross-Site Scripting

LOW 24

The Google Maps Easy WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/modules/marker_groups/views/tpl/mgrEditMarker…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00975 Published 2021-11-01 No fix listed CWE-79

Open these records in search →