Skip to contentCyberhobo Geo Mashup vulnerabilities
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1159536.5 Medium
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerabilityCVE-2026-1159545.4 Medium
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1118487.1 High
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-972507.1 High
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-782946.5 Medium
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerabilityCVE-2026-664508.1 High
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-664497.1 High
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.19 - SQL Injection vulnerabilityCVE-2026-489678.5 High
- cyberhobo geo mashupGeo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' ParameterCVE-2026-75525.3 Medium
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.19 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-427347.1 High
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-274276.5 Medium
- cyberhobo geo mashupGeo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' ParameterCVE-2026-40627.5 High
- cyberhobo geo mashupGeo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' ParameterCVE-2026-40617.5 High
- cyberhobo geo mashupGeo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' ParameterCVE-2026-4060Public exploit7.5 High
- cyberhobo geo mashupGeo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' ParameterCVE-2026-64576.5 Medium
- 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 moreFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterCVE-2024-133626.1 Medium
- cyberhobo geo mashupGeo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' ParameterCVE-2026-24167.5 High
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerabilityCVE-2025-482939.8 Critical
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- cyberhobo geo mashupGeo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list ShortcodeCVE-2024-89906.4 Medium
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440086.5 Medium