CVE-2026-39720 Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Mapster WP Maps 2.0	premières → 2.0.4	Pas de correctif indiqué

Autres CVE de Mapster WP Maps

Les 7 CVE de Mapster WP Maps →

CVE-2026-107743 The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and… 7.2 Élevée CVE-2026-12954 The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all versions up to, and… 8.8 Élevée CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Moyenne CVE-2025-9044 The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up… 6.4 Moyenne