Vulnerabilities

TI-2026-51496 CVE-2026-73377 · GHSA-m9gp-f634-3ppc

WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability

LOW 39

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-08-18 Fixed in 1.5.0 CWE-862

TI-2026-51495 CVE-2026-73376 · GHSA-22r5-47c6-39f8

MEDIUM 50

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00564 Published 2026-08-18 Fixed in 1.5.0 CWE-502

TI-2026-51494 CVE-2026-73375 · GHSA-p37p-gp6p-9q27

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-18 Fixed in 1.5.0 CWE-79