CVE-2026-73376 WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73376

Ultimate Maps by Supsystic (WordPress plugin, versions

EUVD-2026-60791

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73376

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...

EUVD-2026-60790

Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73375

Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73375

The WordPress Ultimate Maps by Supsystic plugin versions prior to 1.5.0 allow unauthenticated attackers to inject arbitrary scripts via reflected XSS, potentially enabling session hijacking and credential theft. CVSS 3.1 scores it HIGH (7.1). Exploitation details are not provided; upgrading to ve...

CVE-2026-73375 WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73375 WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-66621 WordPress Ultimate Dashboard Pro plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Dashboard Ultimate Dashboard Pro ultimate-dashboard-pro allows DOM-Based XSS.This issue affects Ultimate Dashboard Pro: from n/a through 3.11.2...

CVE-2026-66621

Unauthenticated reflected XSS affects the Ultimate Dashboard WordPress plugin up to version 3.11.2, scored CVSS 7.1 (HIGH). No patch version or exploitation evidence is provided; users should update to a fixed release when available and apply WAF rules for XSS filtering.

CVE-2026-66621

Unauthenticated Cross Site Scripting XSS in Ultimate Dashboard = 3.11.2 versions...

EUVD-2026-60914

Unauthenticated Cross Site Scripting XSS in Ultimate Dashboard = 3.11.2 versions...

CVE-2026-66621 WordPress Ultimate Dashboard Pro plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Dashboard Ultimate Dashboard Pro ultimate-dashboard-pro allows DOM-Based XSS.This issue affects Ultimate Dashboard Pro: from n/a through 3.11.2...

WordPress Ultimate Dashboard Pro plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Ultimate Dashboard Pro versions = 3.11.2...

WordPress Ultimate Dashboard plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Ultimate Dashboard versions = 3.11.2...

WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Asim Alshaya in WordPress Plugin Ultimate Maps by Supsystic versions 1.5.0...

WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin Ultimate Maps by Supsystic versions 1.5.0...

WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Ultimate Maps by Supsystic versions 1.5.0...

PT-2026-77057

Name of the Vulnerable Software and Affected Versions Ultimate Dashboard versions prior to 3.11.3 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...