Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: MiKa Clear all filters
TI-2026-25949 CVE-2026-33559 · GHSA-fgh4-4rfj-927q

Cross-site scripting in MiKa OpenStreetMap

Priority LOW 22

WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00168 Published 2026-03-27 Fixed in 6.1.15 CWE-79
TI-2026-20441 CVE-2026-25323 · GHSA-xj9r-5fj6-ggxg

WordPress OSM plugin <= 6.1.12 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a through <= 6.1.12.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00283 Published 2026-02-19 No fix listed CWE-862
TI-2025-22720 CVE-2025-31557 · GHSA-chjw-76rq-9c83

WordPress OSM plugin <= 6.1.13 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MiKa OSM osm allows DOM-Based XSS.This issue affects OSM: from n/a through <= 6.1.13.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00263 Published 2025-03-31 No fix listed CWE-79