CVE-2026-19798

The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the setstatus and bulk functions in the MapsController REST controller in versions up to, and including, 3.0.0. The plugin's permissioncallback canedit only verifies...

CVE-2026-19798

The WP Map Block plugin for WordPress (versions up to and including 3.0.0 ) is vulnerable to unauthorized data modification due to a missing capability check in the Maps_Controller REST controller. Specifically, the set_status() and bulk() functions lack object-level ownership checks or publish-l...

CVE-2026-19798 WP Map Block <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Map Publish/Unpublish/Delete via set_status() and bulk() REST Endpoints

The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the setstatus and bulk functions in the MapsController REST controller in versions up to, and including, 3.0.0. The plugin's permissioncallback canedit only verifies...

CVE-2026-19798 WP Map Block <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Map Publish/Unpublish/Delete via set_status() and bulk() REST Endpoints

The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the setstatus and bulk functions in the MapsController REST controller in versions up to, and including, 3.0.0. The plugin's permissioncallback canedit only verifies...

EUVD-2026-102795

The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the setstatus and bulk functions in the MapsController REST controller in versions up to, and including, 3.0.0. The plugin's permissioncallback canedit only verifies...

CVE-2026-19798: Missing Authorization

The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the setstatus and bulk functions in the MapsController REST controller in versions up to, and including, 3.0.0. The plugin's permissioncallback canedit only verifies...

PT-2026-115500

Name of the Vulnerable Software and Affected Versions Wp Map Block versions prior to 3.0.1 Description The software contains a flaw allowing unauthorized data modification due to missing capability checks within the set status and bulk functions of the Maps Controller REST controller. The can edi...

WordPress WP Map Block plugin <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Map Publish/Unpublish/Delete via set_status() and bulk() REST Endpoints vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Map Publish/Unpublish/Delete via setstatus and bulk REST Endpoints vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Map Block versions = 3.0.0...

WordPress WP Map Block authorization issue vulnerability

WordPress WP Map Block 3.0.0 and earlier versions have an authorization issue. This issue stems from the lack of capability checks in the MapsController REST controller’s setstatus and bulk functions. The permission callback canedit only validates editposts; no object-level ownership checks or...

CVE-2026-96256

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Map block's 'marker' attribute in versions up to, and including, 6.4.5 This is due to insufficient input sanitization and output escaping ...

CVE-2026-96256 Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Map block's 'marker' attribute in versions up to, and including, 6.4.5 This is due to insufficient input sanitization and output escaping ...

CVE-2026-96256

The Gutenberg Essential Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 6.4.5 . The flaw resides in the Google Map block's 'marker' attribute due to inadequate input sanitization and output escaping of marker title and content values....

CVE-2026-96256: Improper Neutralization of Input During Web Page Generation

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Map block's 'marker' attribute in versions up to, and including, 6.4.5 This is due to insufficient input sanitization and output escaping ...

PT-2026-103771

Name of the Vulnerable Software and Affected Versions Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns versions prior to 6.4.6 Description Stored Cross-Site Scripting XSS occurs via the 'marker' attribute of the Google Map block. The issue stems from insufficient input...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed a chunk map leak in btrfsmapblock after btrfschunkmapnumcopies. Fixed a chunk map leak in btrfsmapblock: if we return early with -EINVAL, we are not freeing the chunk map that we just looked up...

SUSE CVE-2026-43393

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix chunk map leak in btrfsmapblock after btrfschunkmapnumcopies Fix a chunk map leak in btrfsmapblock: if we return early with -EINVAL, we're not freeing the chunk map that we've just looked up...

EUVD-2026-28699

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix chunk map leak in btrfsmapblock after btrfschunkmapnumcopies Fix a chunk map leak in btrfsmapblock: if we return early with -EINVAL, we're not freeing the chunk map that we've just looked up...

CVE-2026-43393

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix chunk map leak in btrfsmapblock after btrfschunkmapnumcopies Fix a chunk map leak in btrfsmapblock: if we return early with -EINVAL, we're not freeing the chunk map that we've just looked up...

UBUNTU-CVE-2026-43393

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix chunk map leak in btrfsmapblock after btrfschunkmapnumcopies Fix a chunk map leak in btrfsmapblock: if we return early with -EINVAL, we're not freeing the chunk map that we've just looked up...

CVE-2026-43393

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix chunk map leak in btrfsmapblock after btrfschunkmapnumcopies Fix a chunk map leak in btrfsmapblock: if we return early with -EINVAL, we're not freeing the chunk map that we've just looked up...