EF
Product
Extensions for Leaflet Map
7
CVEs
0
On KEV
7.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add Extensions for Leaflet Map to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57380 | 7.1 | Jul 13 | WordPress Extensions for Leaflet Map plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability Affected: through 5.1 |
| CVE-2026-114703 | 6.5 | Oct 22 | WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability Affected: through 6.0 |
| CVE-2025-66093 | 6.5 | Nov 21 | WordPress Extensions for Leaflet Map plugin <= 4.8 - Cross Site Scripting (XSS) vulnerability Affected: through 4.8 |
| CVE-2026-5451 | 6.4 | Apr 8 | Extensions for Leaflet Map <= 4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'elevation-track' Shortcode Affected: through 4.14 |
| CVE-2025-12369 | 6.4 | Nov 4 | Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 4.7 |
| CVE-2023-31074 | 6.1 | Aug 17 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in hupe13 Extensions for Leaflet Map plugin <= 3.4.1 versions Affected: through 3.4.1 |
| CVE-2026-103485 New | 5.4 | Oct 29 | Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property Affected: through 5.4 |
Showing 7