Mika Osm vulnerabilities

• mika osm – openstreetmap OSM <= 6.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker_name' Shortcode Attribute CVE-2026-4429 6.4 MediumApril 9, 2026
• mika osm WordPress OSM plugin <= 6.1.12 - Broken Access Control vulnerability CVE-2026-25323 4.3 MediumFebruary 19, 2026
• mika osm WordPress OSM plugin <= 6.1.13 - Cross Site Scripting (XSS) vulnerability CVE-2025-31557 6.5 MediumMarch 31, 2025
• hyumika openstreetmap, mika osm +1 more WordPress OSM – OpenStreetMap plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-52355 6.5 MediumNovember 11, 2024
• hyumika openstreetmap, mika osm – openstreetmap +1 more OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes CVE-2024-8991 6.4 MediumSeptember 27, 2024
• hyumika openstreetmap, mika osm – openstreetmap, osm-openstreetmap +2 more OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) SQL Injection CVE-2024-3604 9.9 CriticalJuly 9, 2024
• hyumika openstreetmap, mika osm – openstreetmap, osm-openstreetmap +2 more OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-3603 6.4 MediumJuly 9, 2024
• hyumika openstreetmap, mika osm – openstreetmap +1 more WordPress OSM – OpenStreetMap Plugin <= 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-30544 4.3 MediumJanuary 17, 2023