| CVE-2026-7552 |
The Geo Mashup plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.13.19
|
5.3
Medium
|
May 28, 2026 |
| CVE-2026-4061 |
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'map_post_type' parameter in all…
|
7.5
High
|
May 2, 2026 |
| CVE-2026-4062 |
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids' and…
|
7.5
High
|
May 2, 2026 |
| CVE-2026-4060 |
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions…
|
7.5
High
|
May 2, 2026 |
| CVE-2026-6457 |
The Geo Mashup plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geo_mashup_null_fields'…
|
6.5
Medium
|
May 2, 2026 |
| CVE-2024-13362 |
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
|
6.1
Medium
|
May 1, 2026 |
| CVE-2026-2416 |
The Geo Mashup plugin for WordPress is vulnerable to SQL Injection via the 'sort' parameter in all versions up to, and…
|
7.5
High
|
Feb 25, 2026 |
| CVE-2022-4974 |
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
|
6.3
Medium
|
Oct 16, 2024 |
| CVE-2024-8990 |
The Geo Mashup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Oct 1, 2024 |