MW
Product
Mapster WP Maps
8
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Mapster WP Maps to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12954 | 8.8 | Sep 18 | Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter Affected: through 1.23.0 |
| CVE-2024-9235 | 8.8 | Oct 25 | Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update Affected: through 1.5.0 |
| CVE-2026-107743 New | 7.2 | Oct 29 | Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter Affected: through 2.0.5 |
| CVE-2026-39720 | 7.1 | Oct 6 | WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.4 |
| CVE-2025-9044 | 6.4 | Sep 26 | Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.20.0 |
| CVE-2024-10592 | 6.4 | Nov 16 | Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.6.0 |
| CVE-2024-13362 | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Affected: through 1.9.0 |
| CVE-2024-21744 | 5.4 | Jan 8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mapster Technology Inc Affected: through 1.2.38 |
Showing 8