Vulnerabilities

TI-2024-11594 CVE-2024-12494 · GHSA-2px3-m69v-2qf4

BMLT Meeting Map <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The BMLT Meeting Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_meeting_map' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00308 Published 2025-01-24 No fix listed CWE-79

TI-2024-12634 CVE-2024-13593 · GHSA-jrmf-jfmc-6w2p

BMLT Meeting Map <= 2.6.0 - Authenticated (Contributor+) Local File Inclusion

MEDIUM 41

The BMLT Meeting Map plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.6.0 via the 'bmlt_meeting_map' shortcode.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00738 Published 2025-01-23 No fix listed CWE-98

Vulnerabilities

Filters

BMLT Meeting Map <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

BMLT Meeting Map <= 2.6.0 - Authenticated (Contributor+) Local File Inclusion