Cyberhobo vulnerabilities

Products

• Geo Mashup 21
• Geo Mashup 3

Newest

• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability CVE-2026-115953 6.5 MediumOctober 26, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerability CVE-2026-115954 5.4 MediumOctober 26, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability CVE-2026-111848 7.1 HighOctober 21, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability CVE-2026-97250 7.1 HighSeptember 30, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability CVE-2026-78294 6.5 MediumSeptember 17, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability CVE-2026-66450 8.1 HighAugust 13, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability CVE-2026-66449 7.1 HighAugust 13, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.19 - SQL Injection vulnerability CVE-2026-48967 8.5 HighJune 17, 2026
• cyberhobo geo mashup Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter CVE-2026-7552 5.3 MediumMay 28, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.19 - Cross Site Scripting (XSS) vulnerability CVE-2026-42734 7.1 HighMay 27, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability CVE-2026-27427 6.5 MediumMay 26, 2026
• cyberhobo geo mashup Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter CVE-2026-4062 7.5 HighMay 2, 2026
• cyberhobo geo mashup Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter CVE-2026-4061 7.5 HighMay 2, 2026
• cyberhobo geo mashup Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter CVE-2026-4060 Public exploit 7.5 HighMay 2, 2026
• cyberhobo geo mashup Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter CVE-2026-6457 6.5 MediumMay 2, 2026
• 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
• cyberhobo geo mashup Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter CVE-2026-2416 7.5 HighFebruary 25, 2026
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability CVE-2025-48293 9.8 CriticalAugust 14, 2025
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• cyberhobo geo mashup Geo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode CVE-2024-8990 6.4 MediumOctober 1, 2024
• cyberhobo geo mashup WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability CVE-2024-44008 6.5 MediumSeptember 17, 2024
• cyberhobo geo mashup The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor... CVE-2018-14071 9.8 CriticalJuly 16, 2018
• cyberhobo geo mashup Cross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup plugin before... CVE-2015-1383 4.3 MediumFebruary 2, 2015