100plugins

8 CVEs across 4 100plugins products. Browse 100plugins vulnerabilities, severities, and proof-of-concept exploits.

100plugins products with known CVEs

ProductCVEs
Open User Map6
Open User Map1
Open User Map – Interactive Leaflet Maps1
Open User Map Pro1
100plugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-84818High7.12026-09-08Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.
CVE-2026-66445Medium6.52026-07-27Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions.
CVE-2026-15755Medium6.42026-07-24The Open User Map – Interactive Leaflet Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to…
CVE-2026-2827Medium4.72026-06-11The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oum_location_notification' parameter in versions up to, and in…
CVE-2024-13362Medium6.12026-05-01Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient inp…
CVE-2025-68002Medium6.52026-02-20Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.Th…
CVE-2025-57953Medium6.52025-09-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 100plugins Open User Map open-user-map allows DOM-Based X…
CVE-2023-45056Medium5.92023-10-18Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 100plugins Open User Map plugin <= 1.3.26 versions.