3399 matches found
WordPress WP Maps plugin < 4.9.7 - Subscriber+ Denial of Service vulnerability
Subscriber+ Denial of Service vulnerability discovered by Mohammad Aghdasi in WordPress Plugin WP Maps versions 4.9.7...
WordPress WP Go Maps plugin < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID vulnerability
Unauthenticated Sensitive Information Disclosure via Marker ID vulnerability discovered by Sudhanshu Chauhan RedHunt Labs in WordPress Plugin WP Go Maps versions 10.0.10...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: bpf: Exclusive maps for bpfmapelem iterators are rejected Exclusive maps also known as exclproghash are meant to be accessible only from the single program whose hash matches that map. This rule is enforced by...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: bpf: Exclusive maps are rejected as inner maps in map-in-map structures. An exclusive map created using exclproghash is bound to a single program by the checkmapprogcompatibility function. This function refuses to load any progra...
WordPress WP Maps plugin < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation vulnerability
Subscriber+ Unlimited Autoloaded Option Creation vulnerability discovered by Xanlar Agamalizade in WordPress Plugin WP Maps versions 4.9.8...
CVE-2026-54508 TREK: Blind SSRF via unvalidated redirect-following in Google/Naver list import and Maps URL resolution
TREK is a collaborative travel planner. Prior to 3.1.0, TREK validates only the initial URL before native redirect following in importGoogleList and importNaverList in server/src/services/placeService.ts and resolveGoogleMapsUrl in server/src/services/mapsService.ts. The affected sinks call...
CVE-2026-54508 TREK: Blind SSRF via unvalidated redirect-following in Google/Naver list import and Maps URL resolution
TREK is a collaborative travel planner. Prior to 3.1.0, TREK validates only the initial URL before native redirect following in importGoogleList and importNaverList in server/src/services/placeService.ts and resolveGoogleMapsUrl in server/src/services/mapsService.ts. The affected sinks call...
Linux Distros Unpatched Vulnerability : CVE-2026-52854
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the displaymap parser functi...
CVE-2026-73183
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73183 WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73183
Maps Marker Pro (WordPress plugin) versions ≤ 4.32 contain an unauthenticated SQL injection vulnerability, allowing remote attackers with no credentials to read sensitive data and potentially affect availability. CVSS 3.1 scores it 9.3 Critical (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L). Patchstack ha...
EUVD-2026-62378
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-74364
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. Exclusive maps, which are designed to be used by a single program, can be incorrectly inserted as inner maps within a map-in-map structure. This bypasses the intended security checks, allowing an unrelated program to...
WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
SQL Injection vulnerability discovered by johska in WordPress Plugin Maps Marker Pro versions = 4.32...
CVE-2026-18466
The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create an unlimited number of options in the database, each of which is loaded on every page request...
CVE-2026-18466
The WP Maps WordPress plugin (versions before 4.9.8 ) contains a vulnerability where one of its AJAX actions fails to perform a capability check or validate a nonce . This flaw allows users with a Subscriber account to create an unlimited number of options in the database. Each created option is ...
EUVD-2026-62280
The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create an unlimited number of options in the database, each of which is loaded on every page request...
CVE-2026-18466 WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation
The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create an unlimited number of options in the database, each of which is loaded on every page request...
