Vulnerabilities

TI-2024-08571 CVE-2024-9235 · GHSA-hxm9-74vc-277m

Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update

MEDIUM 41

The Mapster WP Maps plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to an insufficient capability check on the mapster_wp_maps_set_option_from_js() functi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.005 Published 2024-10-25 No fix listed CWE-285

TI-2024-14430 CVE-2024-21744 · GHSA-f2w2-g9x5-9598

WordPress Mapster WP Maps Plugin <= 1.2.38 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mapster Technology Inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-01-08 No fix listed CWE-79

Vulnerabilities

Filters

Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update

WordPress Mapster WP Maps Plugin <= 1.2.38 is vulnerable to Cross Site Scripting (XSS)