Product

100plugins Open User Map – Interactive Leaflet Maps vulnerabilities

1 published CVE affecting 100plugins Open User Map – Interactive Leaflet Maps, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest 100plugins Open User Map – Interactive Leaflet Maps CVEs

Newest publication first

CVE-2026-15755 Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Published 2026-07-24

MediumCVSS 6.4

The Open User Map – Interactive Leaflet Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.4.45 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

100plugins Open User Map – Interactive Leaflet Maps vulnerabilities

Latest 100plugins Open User Map – Interactive Leaflet Maps CVEs

CVE-2026-15755 Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes