Plugin icon

Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

ultimate-maps-by-supsystic

Vulnerabilities:

10

Last Updated:

October 16, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-30
Title
Ultimate Maps by Supsystic < 1.6.1 - Missing Authorization
Fixed in
Fixed in 1.6.1
CVSS
5.3 (medium)
Published
2026-09-30
Title
Ultimate Maps by Supsystic < 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.1
CVSS
7.2 (high)
Published
2026-09-03
Title
Ultimate Maps by Supsystic < 1.5.4 - Missing Authorization
Fixed in
Fixed in 1.5.4
CVSS
5.3 (medium)
Published
2026-08-18
Title
Ultimate Maps by Supsystic < 1.5.0 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.5.0
CVSS
8.1 (high)
Published
2026-08-18
Title
Ultimate Maps by Supsystic < 1.5.0 - Missing Authorization
Fixed in
Fixed in 1.5.0
CVSS
5.3 (medium)
Published
2026-08-18
Title
Ultimate Maps by Supsystic < 1.5.0 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.0
CVSS
7.2 (high)
Published
2024-04-05
Title
Ultimate Maps by Supsystic < 1.2.17 - Cross-Site Request Forgery
Fixed in
Fixed in 1.2.17
CVSS
4.3 (medium)
Published
2024-01-12
Title
Ultimate Maps by Supsystic < 1.2.16 - Admin+ Stored XSS
Fixed in
Fixed in 1.2.16
CVSS
3.5 (low)
Published
2021-04-19
Title
Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)
Fixed in
Fixed in 1.2.5
CVSS
7.1 (high)
Published
2021-02-08
Title
Ultimate Maps by Supsystic < 1.1.17 - Authenticated SQL Injections
Fixed in
Fixed in 1.1.17
CVSS
9.0 (critical)