Advisories · Technology
Mapster WP Maps.
Every CVE that names Mapster WP Maps among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route
- Mapster WP Maps
- Broken access control
- CVSS 7.2 High
Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter
- Mapster WP Maps
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
- Mapster WP Maps
- Cross-site scripting (XSS)
- CVSS 8.8 High
Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter
- Mapster WP Maps
- CWE-20
- CVSS 7.5 High
Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure
- Mapster WP Maps
- Information disclosure
- CVSS 6.4 Medium
Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Mapster WP Maps
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Mapster WP Maps
- Cross-site scripting (XSS)
- CVSS 8.8 High
Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update
- Mapster WP Maps
- Broken access control