Advisories · Technology

hupe13 Extensions for Leaflet Map.

Every CVE that names hupe13 Extensions for Leaflet Map among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103485 CVE record

CVSS 5.4 Medium

Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property
- hupe13 Extensions for Leaflet Map
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2026-114703 CVE record

CVSS 6.5 Medium

WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability
- hupe13 Extensions for Leaflet Map
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2026
CVE-2026-57380 CVE record

CVSS 7.1 High

WordPress Extensions for Leaflet Map plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability
- hupe13 Extensions for Leaflet Map
- Cross-site scripting (XSS)
Not analysed yet 13 Jul 2026
CVE-2026-5451 CVE record

CVSS 6.4 Medium

Extensions for Leaflet Map <= 4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'elevation-track' Shortcode
- hupe13 Extensions for Leaflet Map
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2026
CVE-2025-66093 CVE record

CVSS 6.5 Medium

WordPress Extensions for Leaflet Map plugin <= 4.8 - Cross Site Scripting (XSS) vulnerability
- hupe13 Extensions for Leaflet Map
- Cross-site scripting (XSS)
Not analysed yet 21 Nov 2025
CVE-2025-12369 CVE record

CVSS 6.4 Medium

Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- hupe13 Extensions for Leaflet Map
- Cross-site scripting (XSS)
Not analysed yet 4 Nov 2025
CVE-2023-31074 CVE record

CVSS 7.1 High

WordPress Extensions for Leaflet Map Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)
- hupe13 Extensions for Leaflet Map
- Cross-site scripting (XSS)
Not analysed yet 17 Aug 2023