7.1High
WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability
100plugins Open User Map
Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.
100plugins open_user_map vulnerabilities (CVE)
CVE records published for 100plugins open_user_map, newest first. Follow to get an email when a new one appears.
6.5Medium
WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability
100plugins Open User Map
Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions.
6.1Medium
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet Go Fetch Jobs (for WP Job Manager); 5starplugins Dynamic Copyright Year; peterschulznl Code Manager; bplugins Advanced Scrollbar – Custom Scrollbar Styling and Behavior
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …
6.5Medium
WordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerability
100plugins Open User Map
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects Open User Map: from n/a through <= 1.4.16.
6.5Medium
WordPress Open User Map Plugin <= 1.4.14 - Cross Site Scripting (XSS) Vulnerability
100plugins Open User Map
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 100plugins Open User Map open-user-map allows DOM-Based XSS.This issue affects Open User Map: from n/a through <= 1.4.14.
6.5Medium
WordPress Attesa Extra plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability
AttesaWP Attesa Extra; 100plugins open_user_map
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AttesaWP Attesa Extra allows Stored XSS.This issue affects Attesa Extra: from n/a through 1.3.9.
5.9Medium
WordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)
100plugins Open User Map
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 100plugins Open User Map plugin <= 1.3.26 versions.