mapster vulnerabilities

7 published CVEs name mapster among the affected products.

Critical 0High 4Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-107743
Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter
mapster · Mapster WP Maps
High7.2
CVE-2026-39720
WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
mapster · Mapster WP Maps
High7.1
CVE-2026-12954
Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter
mapster · Mapster WP Maps
High8.8
CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1
CVE-2025-9044
Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
mapster · Mapster WP Maps
Medium6.4
CVE-2024-10592
Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
mapster · Mapster WP Maps
Medium6.4
CVE-2024-9235
Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update
mapster · Mapster WP Maps
High8.8