10
Vendor
100plugins
6
CVEs
0
On KEV
0
New 30D
Products
OU7.1
Open User Map
100plugins
4 CVEs0 on KEV0 new
OU6.4
Open User Map – Interactive Leaflet Maps
100plugins
1 CVEs0 on KEV0 new
OU4.7
Open User Map PRO
100plugins
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84818 | OU Open User Map 100plugins | 7.1 | Sep 8 | WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-66445 | OU Open User Map 100plugins | 6.5 | Jul 27 | WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-15755 | OU Open User Map – Interactive Leaflet Maps 100plugins | 6.4 | Jul 24 | Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes |
| CVE-2026-2827 | OU Open User Map PRO 100plugins | 4.7 | Jun 11 | Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification' |
| CVE-2024-13362 | OU Open User Map 100plugins | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2023-45056 | OU Open User Map 100plugins | 4.8 | Oct 18 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 100plugins Open User Map plugin <= 1.3.26 versions |