Skip to content
Threat Feed
Subscribe

Vendor

Mapster

2 briefs RSS
high advisory

Mapster WP Maps: Stored Cross-Site Scripting (CVE-2026-107743)

The Mapster WP Maps plugin for WordPress up to version 2.0.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts into map configurations via the REST API.

Mapster WP Maps xss web-application wordpress cve-2026-107743
2t 1c
high advisory

Arbitrary User Meta Write Vulnerability in Mapster WP Maps Plugin

The Mapster WP Maps WordPress plugin contains an arbitrary user meta write vulnerability via the my_profile_update() function, allowing authenticated users with Subscriber-level access to overwrite arbitrary user metadata.

WP Maps web-vulnerability wordpress arbitrary-meta-write
1t 1c