Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: hupe13 Clear all filters
TI-2026-82324 CVE-2026-103485 · GHSA-7vcm-wxx6-q65r

Stored DOM-based XSS in Extensions for Leaflet Map WordPress plugin

Priority LOW 24

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feature.properties[<template-token>]' parameter in all versions up to, and including, 5.4 due to insuffi…

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00341 Published 2026-10-29 No fix listed CWE-79
TI-2026-79243 CVE-2026-114703 · GHSA-hrmh-fm6j-2wgj

Stored cross-site scripting in Extensions for Leaflet Map plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet M…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-22 No fix listed CWE-79
TI-2026-41317 CVE-2026-57380 · GHSA-hcmc-pmcf-c73g

WordPress Extensions for Leaflet Map plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leafle…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
TI-2026-04773 CVE-2026-5451 · GHSA-f684-x2p3-9qp3

Cross-site scripting in hupe13 Extensions for Leaflet Map

Priority LOW 28

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elevation-track' shortcode in all versions up to, and including, 4.14.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00209 Published 2026-04-08 No fix listed CWE-79
TI-2026-03817 CVE-2026-4389 · GHSA-p529-4vj7-h7jm

Cross-site scripting in hupe13 DSGVO snippet for Leaflet Map and its Extensions

Priority LOW 28

The DSGVO snippet for Leaflet Map and its Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `leafext-cookie-time` and `leafext-delete-cookie` shortcodes in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00244 Published 2026-03-26 No fix listed CWE-79
TI-2025-40618 CVE-2025-66093 · GHSA-4p72-hvvm-vvpj

WordPress Extensions for Leaflet Map plugin <= 4.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leafle…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-11-21 No fix listed CWE-79