Mapster vulnerabilities
We track 3 vulnerabilities in Mapster products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
Latest Mapster vulnerabilities
- 7.2 High severity
Mapster WP Maps: Improper Neutralization of Input During Web Page Generation
The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.5. This is due to the /wp-json/mapster-wp-maps/save-mapmaker REST route being registered with a permission_callback that unconditionally
- 8.8 High severity
The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all…
The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all versions up to, and including, 1.23.0 via the `my_profile_update()` function. This is due to the function performing no nonce verification, no capability check, and no a
- 8.8 High severity
Mapster WP Maps: Improper Authorization
The Mapster WP Maps plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to an insufficient capability check on the mapster_wp_maps_set_option_from_js() function in all versions up to, and including,