177 matches found
Geo Mashup <= 1.13.18 - SQL Injection
Geo Mashup WordPress plugin = 1.13.18 is vulnerable to time-based SQL injection via the sort parameter. The issue exists because the sort value is insufficiently sanitized in render-map.php/template tag code paths. id: CVE-2026-4060 info: name: Geo Mashup = 1.13.18 - SQL Injection author:...
Geo Mashup <= 1.13.17 - SQL Injection
Geo Mashup WordPress plugin = 1.13.17 contains a SQL injection caused by insufficient escaping of the 'sort' parameter, letting unauthenticated attackers extract sensitive database information remotely. id: CVE-2026-2416 info: name: Geo Mashup = 1.13.17 - SQL Injection author: Shivam Kamboj...
CVE-2026-4060-PoC
CVE-2026-4060 — Geo Mashup ≤ 1.13.18 認証なしSQLインジェクション PoC -blue 認証なし の攻撃者は、Geo Mashup の render-map エンドポイントの sort パラメータを介して ORDER BY 句に任意のSQLを注入し、機密データベース情報の時間ベースのブラインド抽出を可能にします。 目次 Vulnerability Overview Test Environment How to Run Test Results Mitigation Detection Timeline References 脆弱性の概要 フィールド...
CVE-2026-97250
Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
CVE-2026-97250
The Geo Mashup WordPress plugin in versions
EUVD-2026-89914
Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
CVE-2026-97250 WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin Geo Mashup versions = 1.13.21...
CVE-2026-78294
Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
EUVD-2026-81518
Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
CVE-2026-78294 WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
CVE-2026-78294 WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
CVE-2026-78294
The Geo Mashup WordPress plugin (versions ≤ 1.13.21 ) is affected by a Contributor-level Cross-Site Scripting (XSS) vulnerability discovered by JunHee CHO and reported via Patchstack. A low-privileged user (Contributor) can inject scripts that execute in the context of a higher-privileged user's ...
CVE-2026-78294: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by JunHee CHO in WordPress Plugin Geo Mashup versions = 1.13.21...
CVE-2026-66449
Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...
CVE-2026-66450
Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...
CVE-2026-66450 WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...