Advisories · Technology
cyberhobo Geo Mashup.
Every CVE that names cyberhobo Geo Mashup among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter
- cyberhobo Geo Mashup
- Broken access control
- CVSS 7.5 High
Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter
- cyberhobo Geo Mashup
- SQL injection
- CVSS 7.5 High
Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter
- cyberhobo Geo Mashup
- SQL injection
- CVSS 7.5 High
Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter
- cyberhobo Geo Mashup
- SQL injection
- CVSS 6.5 Medium
Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter
- cyberhobo Geo Mashup
- SQL injection
- CVSS 7.5 High
Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter
- cyberhobo Geo Mashup
- SQL injection
- CVSS 6.4 Medium
Geo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode
- cyberhobo Geo Mashup
- Cross-site scripting (XSS)