Mapster vulnerabilities

Products

• Wp Maps 10
• Wp Maps 2

Newest

• mapster wp maps, unknown mapster wp maps +1 more Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route CVE-2026-118638 7.5 HighOctober 31, 2026
• mapster wp maps Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter CVE-2026-107743 7.2 HighOctober 29, 2026
• mapster wp maps WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-39720 7.1 HighOctober 6, 2026
• mapster wp maps Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter CVE-2026-12954 8.8 HighSeptember 18, 2026
• mapster wp maps, unknown mapster wp maps +1 more Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure CVE-2026-14839 7.5 HighAugust 1, 2026
• 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
• mapster wp maps Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9044 6.4 MediumSeptember 26, 2025
• mapster wp maps Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-10592 6.4 MediumNovember 16, 2024
• mapster wp maps Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update CVE-2024-9235 8.8 HighOctober 25, 2024
• mapster wp maps WordPress Mapster WP Maps Plugin <= 1.2.38 is vulnerable to Cross Site Scripting (XSS) CVE-2024-21744 6.5 MediumJanuary 8, 2024