Mapster WP Maps vulnerabilities
3 known vulnerabilities in Mapster WP Maps from Mapster. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Mapster WP Maps: Improper Neutralization of Input During Web Page Generation
The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.5. This is due to the /wp-json/mapster-wp-maps/save-mapmaker REST route being registered with a permission_callback that unconditionally
- 8.8 High severity
The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all…
The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all versions up to, and including, 1.23.0 via the `my_profile_update()` function. This is due to the function performing no nonce verification, no capability check, and no a
- 8.8 High severity
Mapster WP Maps: Improper Authorization
The Mapster WP Maps plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to an insufficient capability check on the mapster_wp_maps_set_option_from_js() function in all versions up to, and including,