Mapster WP Maps vulnerabilities
We track 2 vulnerabilities in Mapster WP Maps products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Mapster WP Maps vulnerabilities
- 7.5 High severity
Mapster WP Maps: Missing Authorization
The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowing unauthenticated attackers to overwrite the title of arbitrary posts, create arbitrary published posts, and overwrite
- 7.5 High severity
Mapster WP Maps: Exposure of Sensitive Information to an Unauthorized Actor
The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublis