Vulnerabilities

TI-2026-80327 CVE-2026-115953 · GHSA-3x9f-gjpx-5wm8

Stored cross-site scripting in WordPress Geo Mashup plugin

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through 1.13.22.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-26 No fix listed CWE-79

TI-2026-80328 CVE-2026-115954 · GHSA-25r5-fxc8-5cj2

Missing authorization in WordPress Geo Mashup plugin

LOW 24

Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Geo Mashup: from n/a through 1.13.22.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00179 Published 2026-10-26 No fix listed CWE-862

TI-2026-78804 CVE-2026-111848 · GHSA-wcr6-r38v-74h5

Reflected cross-site scripting in WordPress Geo Mashup plugin

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00202 Published 2026-10-21 No fix listed CWE-79

TI-2026-63991 CVE-2026-97250 · GHSA-jwgp-w97m-rg36

WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

LOW 30

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-09-30 No fix listed CWE-79

TI-2026-54465 CVE-2026-78294 · GHSA-28gp-m9rr-mwp4

WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

LOW 28

Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-09-17 No fix listed CWE-79

TI-2026-47204 CVE-2026-66450 · GHSA-mqmh-wh52-p9gx

WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability

LOW 38

Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00467 Published 2026-08-13 No fix listed CWE-98

TI-2026-47203 CVE-2026-66449 · GHSA-vcj7-r74g-x87v

WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-13 No fix listed CWE-79

TI-2026-36223 CVE-2026-48967 · GHSA-657f-hp84-rfhg

WordPress Geo Mashup plugin <= 1.13.19 - SQL Injection vulnerability

LOW 37

Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00332 Published 2026-06-17 No fix listed CWE-89

TI-2026-30957 CVE-2026-42734 · GHSA-jh8h-gfc6-89v8

WordPress Geo Mashup plugin <= 1.13.19 - Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through <= 1.13.19.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0018 Published 2026-05-27 No fix listed CWE-79

TI-2026-21840 CVE-2026-27427 · GHSA-7r8v-3xv6-7cm6

WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00171 Published 2026-05-26 No fix listed CWE-79

TI-2025-30619 CVE-2025-48293 · GHSA-fp36-rj7g-fmm6

WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability

MEDIUM 49

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows PHP Local File Inclusion.This issue affects Geo Mashup: fro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00475 Published 2025-08-14 No fix listed CWE-98

Vulnerabilities

Filters