Supsystic Ultimate Maps By Supsystic
6 CVEs affecting Supsystic Ultimate Maps By Supsystic. Latest disclosed: 2026-09-03. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-73376 | Critical | 9.8 | 2026-08-18 | Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions. |
CVE-2026-73377 | High | 7.5 | 2026-08-18 | Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions. |
CVE-2026-73375 | High | 7.1 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions. |
CVE-2021-24274 | Medium | 6.1 | 2021-05-05 | The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leadi… |
CVE-2026-85309 | Medium | 5.3 | 2026-09-03 | Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issu… |
CVE-2024-31271 | Medium | 4.3 | 2024-04-12 | Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Ultimate Maps by Supsystic.This issue affects Ultimate Maps by Supsystic: from n/a through 1.2.16. |