Vulnerabilities

TI-2026-58315 CVE-2026-84818 · GHSA-r47m-7q9p-f86q

WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-09-08 No fix listed CWE-79

TI-2026-47199 CVE-2026-66445 · GHSA-wfh4-fffw-84wv

WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability

LOW 28

Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-07-27 No fix listed CWE-79

TI-2026-13255 CVE-2026-15755 · GHSA-qf2j-rjv4-p2wp

Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

LOW 29

The Open User Map – Interactive Leaflet Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.4.45 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00419 Published 2026-07-24 No fix listed CWE-79

TI-2026-02429 CVE-2026-2827 · GHSA-x7wp-5p27-3p93

Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification'

LOW 21

The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oum_location_notification' parameter in versions up to, and including, 1.4.31 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00188 Published 2026-06-11 No fix listed CWE-79

TI-2024-12404 CVE-2024-13362 · GHSA-c7cj-88jr-mhx2

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

LOW 27

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00276 Published 2026-05-01 No fix listed CWE-79

TI-2025-41611 CVE-2025-68002 · GHSA-58p5-8f5p-8qqg

WordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerability

LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects Open User Map: from n/a through <= 1.4.16.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0037 Published 2026-02-20 No fix listed CWE-22

TI-2025-35806 CVE-2025-57953 · GHSA-6cpj-j4gf-fq8x

WordPress Open User Map Plugin <= 1.4.14 - Cross Site Scripting (XSS) Vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 100plugins Open User Map open-user-map allows DOM-Based XSS.This issue affects Open User Map: from n/a through <= 1.4.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00313 Published 2025-09-22 No fix listed CWE-79

TI-2023-24104 CVE-2023-45056 · GHSA-mjf7-677g-49gx

WordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 100plugins Open User Map plugin <= 1.3.26 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-10-18 No fix listed CWE-79

Vulnerabilities

Filters