Skip to content
100plugins vulnerabilities
Newest
-
100plugins open user map
WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84818
7.1 High
-
100plugins open user map
WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66445
6.5 Medium
-
100plugins open user map – interactive leaflet maps
Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-15755
6.4 Medium
-
100plugins open user map pro
Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification'
CVE-2026-2827
4.7 Medium
-
100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2024-13362
6.1 Medium
-
100plugins open user map
WordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerability
CVE-2025-68002
6.5 Medium
-
100plugins open user map
WordPress Open User Map Plugin <= 1.4.14 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57953
6.5 Medium
-
attesawp attesa extra, 100plugins open user map +1 more
WordPress Attesa Extra plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-32594
6.5 Medium
-
100plugins open user map
WordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-45056
5.9 Medium