MW
Product
Mapster WP Maps
8
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Mapster WP Maps to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12954 | 8.8 | Sep 18 | Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter Affected: through 1.23.0 |
| CVE-2024-9235 | 8.8 | Oct 25 | Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update Affected: through 1.5.0 |
| CVE-2026-107743 New | 7.2 | Oct 29 | Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter Affected: through 2.0.5 |
| CVE-2026-39720 | 7.1 | Oct 6 | WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.4 |
Showing 4