WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin Ultimate Maps by Supsystic versions 1.5.0...

WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Ultimate Maps by Supsystic versions 1.5.0...

CVE-2026-73376: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73375: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...

PT-2026-77106

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic 1.5.0 versions...

PT-2026-77105

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...

PT-2026-77104

Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73377: Missing Authorization

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2020-37242

Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can send crafted requests to the getListForTbl action with boolean-based blind or...

CVE-2020-37242

Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can send crafted requests to the getListForTbl action with boolean-based blind or...

CVE-2020-37242

Supsystic Ultimate Maps 1.1.12 (WordPress plugin) contains an SQL injection via the sidx GET parameter in the getListForTbl action. An unauthenticated attacker can send crafted requests to perform boolean-based blind or time-based blind SQL injection to extract data from the database. No remediat...

CVE-2020-37242

Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can send crafted requests to the getListForTbl action with boolean-based blind or...

WordPress plugin Supsystic Ultimate Maps SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

PT-2026-41442

Name of the Vulnerable Software and Affected Versions Supsystic Ultimate Maps version 1.1.12 Description An SQL injection flaw allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by injecting malicious code through the sidx GET parameter when interacting with the...

CVE-2020-37242: Improper Neutralization of Special Elements used in an SQL Command

Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can send crafted requests to the getListForTbl action with boolean-based blind or...

WordPress Ultimate Maps by Supsystic plugin < 1.2.16 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Mert Umut in WordPress Plugin Ultimate Maps by Supsystic versions 1.2.16...

EUVD-2021-11188

Malware in sbrugna...

EUVD-2023-58945

Malicious code in bioql PyPI...

EUVD-2024-29167

Malicious code in bioql PyPI...

CVE-2024-31271

Cross-Site Request Forgery CSRF vulnerability in Supsystic Ultimate Maps by Supsystic.This issue affects Ultimate Maps by Supsystic: from n/a through 1.2.16...