[■] Plugin de WordPress

Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

10 expedientes en el radar

Comprueba tu versión de Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key Sólo las que se están explotando

[■] Registro

Vulnerabilidades (10)

5,3 Media

CVE-2026-102397: falta de autorización en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2026-102397

T−46d 30 sept. 2026
7,2 Alta

CVE-2026-102396: cross-site scripting (XSS) en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2026-102396

T−46d 30 sept. 2026
5,3 Media

CVE-2026-85309: falta de autorización en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2026-85309

T−73d 3 sept. 2026
5,3 Media

CVE-2026-73377: falta de autorización en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2026-73377

T−89d 18 ago. 2026
8,1 Alta

CVE-2026-73376: deserialización de datos no fiables en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2026-73376

T−89d 18 ago. 2026
7,2 Alta

CVE-2026-73375: cross-site scripting (XSS) en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2026-73375

T−89d 18 ago. 2026
4,3 Media

CVE-2024-31271: falsificación de peticiones (CSRF) en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2024-31271

T−954d 5 abr. 2024
4,4 Media

CVE-2023-6732: cross-site scripting (XSS) en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2023-6732

T−1038d 12 ene. 2024
6,1 Media

CVE-2021-24274: cross-site scripting (XSS) en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2021-24274

T−2036d 19 abr. 2021
7,2 Alta

Inyección SQL en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

T−2106d 8 feb. 2021