Login Request a demo
SU
Vendor
Supsystic
23 products with CVEs on record
70
CVEs
0
On KEV
7
New 30D
Products
UM
Ultimate Maps by Supsystic
supsystic
9.8
6 CVEs0 on KEV2 new
EG
Easy Google Maps
supsystic
9.8
10 CVEs0 on KEV1 new
PB
Popup by Supsystic
supsystic
9.8
4 CVEs0 on KEV1 new
CF
Contact Form by Supsystic
supsystic
7.5
5 CVEs0 on KEV2 new
PG
Photo Gallery by Supsystic
supsystic
5.9
2 CVEs0 on KEV1 new
PO
Popup
Supsystic
9.8
10 CVEs0 on KEV0 new
SS
Social Share Buttons
Supsystic
8.8
5 CVEs0 on KEV0 new
CF
Contact Form
Supsystic
8.8
3 CVEs0 on KEV0 new
DT
Data Tables Generator
Supsystic
8.8
3 CVEs0 on KEV0 new
PG
Photo Gallery
Supsystic
8.8
3 CVEs0 on KEV0 new
PT
Pricing Table BY Supsystic
Supsystic
8.8
3 CVEs0 on KEV0 new
UM
Ultimate Maps
Supsystic
8.2
3 CVEs0 on KEV0 new
DP
Digital Publications BY Supsystic
Supsystic
8.8
2 CVEs0 on KEV0 new
SL
Slider
Supsystic
8.8
2 CVEs0 on KEV0 new
BA
Backup
Supsystic
6.2
1 CVEs0 on KEV0 new
CS
Coming Soon
Supsystic
8.8
1 CVEs0 on KEV0 new
DT
Data Tables Generator by Supsystic
supsystic
5.4
1 CVEs0 on KEV0 new
DP
Digital Publications
Supsystic
7.5
1 CVEs0 on KEV0 new
GC
Gdpr Cookie Consent
Supsystic
4.8
1 CVEs0 on KEV0 new
ME
Membership
Supsystic
8.2
1 CVEs0 on KEV0 new
NB
Newsletter BY Supsystic
Supsystic
8.8
1 CVEs0 on KEV0 new
PT
Price Table
Supsystic
6.1
1 CVEs0 on KEV0 new
PT
Pricing Table
Supsystic
8.2
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115591
New
CF
Contact Form by Supsystic
Supsystic
7.5–Oct 28WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability
CVE-2026-115595
New
CF
Contact Form by Supsystic
Supsystic
5.3
0%
Oct 26WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability
CVE-2026-102397
UM
Ultimate Maps by Supsystic
supsystic
6.5
0%
Sep 30WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability
CVE-2026-102399
PG
Photo Gallery by Supsystic
supsystic
5.4
0%
Sep 30WordPress Photo Gallery by Supsystic plugin <= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-102398
PB
Popup by Supsystic
supsystic
7.1
0%
Sep 30WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102396
UM
Ultimate Maps by Supsystic
supsystic
7.1
0%
Sep 30WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102395
EG
Easy Google Maps
supsystic
7.1
0%
Sep 30WordPress Easy Google Maps plugin <= 1.14.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-85309
UM
Ultimate Maps by Supsystic
Supsystic
5.3
0%
Sep 3WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerability
CVE-2026-73381
PB
Popup by Supsystic
supsystic
9.1
1%
Aug 18WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability
CVE-2026-73380
PB
Popup by Supsystic
supsystic
9.8
1%
Aug 18WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability
CVE-2026-73379
CF
Contact Form by Supsystic
supsystic
6.5
0%
Aug 18WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability
CVE-2026-73378
CF
Contact Form by Supsystic
supsystic
7.1
0%
Aug 18WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73377
UM
Ultimate Maps by Supsystic
supsystic
7.5
0%
Aug 18WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability
CVE-2026-73376
UM
Ultimate Maps by Supsystic
supsystic
9.8
1%
Aug 18WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability
CVE-2026-73375
UM
Ultimate Maps by Supsystic
supsystic
7.1
0%
Aug 18WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73367
EG
Easy Google Maps
supsystic
7.2
0%
Aug 18WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability
CVE-2026-73366
EG
Easy Google Maps
supsystic
9.8
1%
Aug 18WordPress Easy Google Maps plugin <= 1.13.0 - PHP Object Injection vulnerability
CVE-2026-27537
PB
Popup by Supsystic
supsystic
6.5
0%
Aug 13WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24628
PG
Photo Gallery by Supsystic
Supsystic
5.9
0%
Jul 23WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability
CVE-2020-37246
BA
Backup
Supsystic
6.2
1%
May 16WordPress Plugin Supsystic Backup 2.3.9 Local File Inclusion
CVE-2020-37245
DP
Digital Publications
Supsystic
7.5
0%
May 16WordPress Plugin Supsystic Digital Publications 1.6.9 Path Traversal XSS
CVE-2020-37244
ME
Membership
Supsystic
8.2
0%
May 16WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx
CVE-2020-37243
PT
Pricing Table
Supsystic
8.2
0%
May 16WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS
CVE-2020-37242
UM
Ultimate Maps
Supsystic
8.2
0%
May 16WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx
CVE-2025-52753
CF
Contact Form by Supsystic
supsystic
7.1
0%
Oct 22WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32138
EG
Easy Google Maps
supsystic
6.6
1%
Apr 4WordPress Easy Google Maps plugin <= 1.11.18 - XML External Entity vulnerability
CVE-2024-56253
DT
Data Tables Generator by Supsystic
supsystic
5.4
0%
Jan 2WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerability
CVE-2023-39997
PO
Popup
Supsystic
9.8
1%
Dec 13Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by…
CVE-2023-51353
PO
Popup
Supsystic
9.8
1%
Dec 9Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2024-52434
PO
Popup
Supsystic
9.1
1%
Nov 18Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Injection.This issue affects Popup by Supsystic: from n/a through…
CVE-2024-47330
SL
Slider
Supsystic
8.8
0%
Sep 26Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6;…
CVE-2024-5219
EG
Easy Google Maps
Supsystic
5.4
0%
Jul 2The Easy Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file upload feature in all versions up to, and including, 1.11.15 due to…
CVE-2023-46197
PO
Popup
Supsystic
6.5
1%
May 17Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in supsystic.Com Popup by Supsystic allows Relative Path Traversal.This issue affects…
CVE-2024-31421
PO
Popup
Supsystic
4.3
0%
Apr 15Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic.This issue affects Popup by Supsystic: from n/a through <= 1.10.27
CVE-2024-31269
EG
Easy Google Maps
Supsystic
8.8
0%
Apr 12Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps.This issue affects Easy Google Maps: from n/a through 1.11.11
CVE-2024-29921
PG
Photo Gallery
Supsystic
4.8
0%
Mar 27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in supsystic Photo Gallery by Supsystic gallery-by-supsystic.This issue affects…
CVE-2023-6732
UM
Ultimate Maps
Supsystic
4.8
0%
Jan 16The Ultimate Maps by Supsystic WordPress plugin before 1.2.16 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
CVE-2023-49191
GC
Gdpr Cookie Consent
Supsystic
4.8
0%
Dec 15Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Supsystic GDPR Cookie Consent by Supsystic allows Stored XSS.This issue…
CVE-2023-5756
DP
Digital Publications BY Supsystic
Supsystic
8.8
0%
Dec 9The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6
CVE-2023-45068
CF
Contact Form
Supsystic
8.8
0%
Oct 12Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Contact Form by Supsystic plugin <= 1.7.27 versions
CVE-2023-3186
PO
Popup
Supsystic
9.8
1%
Jul 17The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype
CVE-2023-2526
EG
Easy Google Maps
Supsystic
5.4
0%
Jun 9The Easy Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.11.7
CVE-2023-33926
EG
Easy Google Maps
Supsystic
8.8
0%
May 28Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps plugin <= 1.11.7 versions
CVE-2023-22714
CS
Coming Soon
Supsystic
8.8
0%
May 22Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Coming Soon by Supsystic plugin <= 1.7.10 versions
CVE-2023-2528
CF
Contact Form
Supsystic
8.8
0%
May 17The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.24
CVE-2022-47155
SL
Slider
Supsystic
8.8
0%
Mar 14Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Slider by Supsystic plugin <= 1.8.5 versions
CVE-2022-2384
DP
Digital Publications BY Supsystic
Supsystic
4.8
1%
Aug 15The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site…
CVE-2022-33960
SS
Social Share Buttons
Supsystic
8.8
1%
Jul 22Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress
CVE-2022-27235
SS
Social Share Buttons
Supsystic
8.8
1%
Jul 22Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress
CVE-2022-2114
DT
Data Tables Generator
Supsystic
4.8
1%
Jul 17The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table settings, which could allow high privilege users such as…
CVE-2022-1653
SS
Social Share Buttons
Supsystic
4.3
0%
Jun 27The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints and admin pages, allowing an attacker to trick any logged…
CVE-2017-20065
PO
Popup
Supsystic
4.3
1%
Jun 20A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic
CVE-2021-36891
PG
Photo Gallery
Supsystic
4.3
0%
Jun 15Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows changing the plugin settings
CVE-2021-36890
SS
Social Share Buttons
Supsystic
4.3
0%
Jun 2Cross-Site Request Forgery (CSRF) vulnerability in Social Share Buttons by Supsystic plugin <= 2.2.2 at WordPress
CVE-2022-0424
PO
Popup
Supsystic
5.3
3%
May 9The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get…
CVE-2021-46782
PT
Price Table
Supsystic
6.1
1%
Apr 25The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a…
CVE-2021-46780
EG
Easy Google Maps
Supsystic
6.1
1%
Apr 25The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected…
CVE-2021-39346
EG
Easy Google Maps
Supsystic
4.8
1%
Nov 1The Google Maps Easy WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the…
CVE-2021-24276
CF
Contact Form
Supsystic
6.1
16%
May 5The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected…
CVE-2021-24275
PO
Popup
Supsystic
6.1
18%
May 5The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected…