Advisories · Technology

100plugins Open User Map.

Every CVE that names 100plugins Open User Map among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84818 CVE record

CVSS 7.1 High

WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability
- 100plugins Open User Map
- Cross-site scripting (XSS)
Not analysed yet 8 Sept 2026
CVE-2026-66445 CVE record

CVSS 6.5 Medium

WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability
- 100plugins Open User Map
- Cross-site scripting (XSS)
Not analysed yet 27 Jul 2026
CVE-2024-13362 CVE record

CVSS 6.1 Medium

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
- sebet Go Fetch Jobs (for WP Job Manager)
- 5starplugins Dynamic Copyright Year
- Cross-site scripting (XSS)
Not analysed yet 1 May 2026
CVE-2025-68002 CVE record

CVSS 6.5 Medium

WordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerability
- 100plugins Open User Map
- Path traversal
Not analysed yet 20 Feb 2026
CVE-2025-57953 CVE record

CVSS 6.5 Medium

WordPress Open User Map Plugin <= 1.4.14 - Cross Site Scripting (XSS) Vulnerability
- 100plugins Open User Map
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025
CVE-2023-45056 CVE record

CVSS 5.9 Medium

WordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)
- 100plugins Open User Map
- Cross-site scripting (XSS)
Not analysed yet 18 Oct 2023