MA
Vendor
mapster
8
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107743 New | MW Mapster WP Maps mapster | 7.2 | Oct 29 | Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter |
| CVE-2026-39720 | MW Mapster WP Maps mapster | 7.1 | Oct 6 | WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-12954 | MW Mapster WP Maps mapster | 8.8 | Sep 18 | Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter |
| CVE-2024-13362 | MW Mapster WP Maps mapster | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2025-9044 | MW Mapster WP Maps mapster | 6.4 | Sep 26 | Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-10592 | MW Mapster WP Maps mapster | 6.4 | Nov 16 | Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-9235 | MW Mapster WP Maps mapster | 8.8 | Oct 25 | Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update |
| CVE-2024-21744 | MW Mapster WP Maps Mapster | 5.4 | Jan 8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mapster Technology Inc |