Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Chandni Patel Clear all filters
TI-2026-18047 CVE-2026-22466 · GHSA-h26h-jfm6-q6mx

WordPress WP MapIt plugin <= 3.0.3 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Chandni Patel WP MapIt wp-mapit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP MapIt: from n/a through <= 3.0.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2026-01-22 No fix listed CWE-862
TI-2023-05202 CVE-2023-5658 · GHSA-94fx-j29j-8g9p

WP MapIt <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The WP MapIt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_mapit' shortcode in all versions up to, and including, 2.7.1 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00628 Published 2023-11-07 No fix listed CWE-79