Geo Mashup <= 1.13.18 - SQL Injection

Geo Mashup WordPress plugin = 1.13.18 is vulnerable to time-based SQL injection via the sort parameter. The issue exists because the sort value is insufficiently sanitized in render-map.php/template tag code paths. id: CVE-2026-4060 info: name: Geo Mashup = 1.13.18 - SQL Injection author:...

Geo Mashup <= 1.13.17 - SQL Injection

Geo Mashup WordPress plugin = 1.13.17 contains a SQL injection caused by insufficient escaping of the 'sort' parameter, letting unauthenticated attackers extract sensitive database information remotely. id: CVE-2026-2416 info: name: Geo Mashup = 1.13.17 - SQL Injection author: Shivam Kamboj...

CVE-2026-4060-PoC

CVE-2026-4060 — Geo Mashup ≤ 1.13.18 Unauthenticated SQL Injection PoC -blue Unauthenticated attackers can inject arbitrary SQL into the ORDER BY clause via the sort parameter of the Geo Mashup render-map endpoint, enabling time-based blind extraction of sensitive database information. Table of...

CVE-2026-78294

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

EUVD-2026-81518

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

CVE-2026-78294 WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

CVE-2026-78294 WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

CVE-2026-78294

The Geo Mashup WordPress plugin (versions ≤ 1.13.21 ) is affected by a Contributor-level Cross-Site Scripting (XSS) vulnerability discovered by JunHee CHO and reported via Patchstack. A low-privileged user (Contributor) can inject scripts that execute in the context of a higher-privileged user's ...

CVE-2026-78294: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by JunHee CHO in WordPress Plugin Geo Mashup versions = 1.13.21...

CVE-2026-66449

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...

CVE-2026-66450

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

EUVD-2026-57872

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66450 WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66449

CVE-2026-66449 : Unauthenticated XSS in WordPress Geo Mashup plugin, affected versions

CVE-2026-66450

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66449

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...

EUVD-2026-57871

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...

CVE-2026-66450

CVE-2026-66450 refers to an Unauthenticated Local File Inclusion in the WordPress plugin Geo Mashup, affected versions

CVE-2026-66449 WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...