100plugins Open User Map PRO vulnerabilities (CVE)

CVE records published for 100plugins Open User Map PRO, newest first. Follow to get an email when a new one appears.

1 results

4.7Medium

CVE-2026-2827 5 months ago

Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification'

100plugins Open User Map PRO

The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oum_location_notification' parameter in versions up to, and including, 1.4.31 due to insufficient input sanitization and output escaping. This makes it possible f…