Plugin icon

Mapster WP Maps

mapster-wp-maps

Vulnerabilities:

9

Last Updated:

October 3, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-10-05
Title
Mapster WP Maps < 2.0.5 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.5
CVSS
7.2 (high)
Published
2026-09-17
Title
Mapster WP Maps <= 1.23.0 - Subscriber+ Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter
Fixed in
Fixed in 1.24.0
CVSS
4.3 (medium)
Published
2026-07-20
Title
Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure
Fixed in
Fixed in 1.24.0
CVSS
5.3 (medium)
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 1.21.0
CVSS
7.1 (high)
Published
2025-09-25
Title
Mapster WP Maps < 1.21.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.21.0
CVSS
6.4 (medium)
Published
2024-11-15
Title
Mapster WP Maps < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.7.0
CVSS
6.4 (medium)
Published
2024-10-24
Title
Mapster WP Maps < 1.6.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update
Fixed in
Fixed in 1.6.0
CVSS
8.8 (high)
Published
2024-01-05
Title
Mapster WP Maps < 1.2.39 - Contributor+ Stored XSS
Fixed in
Fixed in 1.2.39
CVSS
5.9 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.2.36
CVSS
6.1 (medium)