Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: photoweblog Clear all filters
TI-2026-03841 CVE-2026-4429 · GHSA-xhg5-7962-f335

OSM <= 6.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker_name' Shortcode Attribute

Priority LOW 28

The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_name' and 'file_color_list' shortcode attribute of the [osm_map_v3] shortcode in all versions up to and including…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00243 Published 2026-04-09 No fix listed CWE-79
TI-2024-08349 CVE-2024-8991 · GHSA-7q48-m9w3-vrpc

OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes

Priority LOW 29

The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's osm_map and osm_map_v3 shortcodes in all versions up to, and including, 6.1.0 due to insufficient input sanitizat…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00411 Published 2024-09-27 No fix listed CWE-79
TI-2024-03359 CVE-2024-3604 · GHSA-vrqh-v8jm-4v2m

OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) SQL Injection

Priority MEDIUM 43

The OSM – OpenStreetMap plugin for WordPress is vulnerable to SQL Injection via the 'tagged_filter' attribute of the 'osm_map_v3' shortcode in all versions up to, and including, 6.0.3 due to insufficient escaping on the…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00528 Published 2024-07-09 No fix listed CWE-89
TI-2024-03358 CVE-2024-3603 · GHSA-vfxc-84q8-h5w2

OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 30

The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'osm_map' shortcode in all versions up to, and including, 6.0.3 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00341 Published 2024-07-09 No fix listed CWE-79