All 7 CVE vulnerabilities found in Mapster WP Maps, with AI-generated Chinese analysis, references, and POCs.
Vendor: Mapster Technology Inc.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-39720 | WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2026-10-06 |
| CVE-2026-12954 | Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter CWE-20 | 8.8 | High | 2026-09-18 |
| CVE-2026-14839 | Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure | - | - | 2026-08-01 |
| CVE-2025-9044 | Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 | 6.4 | Medium | 2025-09-26 |
| CVE-2024-10592 | Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-80 | 6.4 | Medium | 2024-11-16 |
| CVE-2024-9235 | Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update CWE-285 | 8.8 | High | 2024-10-25 |
| CVE-2024-21744 | WordPress Mapster WP Maps Plugin <= 1.2.38 is vulnerable to Cross Site Scripting (XSS) CWE-79 | 6.5 | Medium | 2024-01-08 |
All 7 known CVE vulnerabilities affecting Mapster WP Maps with full Chinese analysis, references, and POCs where available.