Skip to content
Threat Feed
Subscribe

Product

Mapster WP Maps (<= 2.0.5)

1 brief RSS
high advisory

Mapster WP Maps: Stored Cross-Site Scripting (CVE-2026-107743)

The Mapster WP Maps plugin for WordPress up to version 2.0.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts into map configurations via the REST API.

Mapster WP Maps xss web-application wordpress cve-2026-107743
2t 1c