Vulnerabilities / Mapster WP Maps
Mapster WP Maps vulnerabilities
Advisories WPSec published for Mapster WP Maps. Other sources may list more. Its attack surface: Mapster WP Maps on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-20 | WPSEC-2026-1264 | Mapster WP Maps <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Loader Color | Medium 6.4 | 2.0.6 |
| 2026-10-20 | WPSEC-2026-1263 | Mapster WP Maps <= 2.0.5 - Missing Authorization to Unauthenticated Map Modification and Stored Cross-Site Scripting via save-mapmaker REST Endpoint | High 7.2 | 2.0.6 |
| 2026-10-04 | WPSEC-2026-0417 | Mapster WP Maps <= 2.0.4 - Reflected Cross-Site Scripting via 'id' Parameter | Medium 6.1 | 2.0.5 |
License: CC BY 4.0