Approved changes feed: RSS · Atom

cpe:2.3:a:supsystic:ultimate_maps:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorSupsystic (31a63952-7184-5307-ada0-8934fe420f61)
ProductUltimate Maps (8a791986-9568-5ff3-b2e0-2959c9f7e804)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6732 vulnerable 2026-06-03 14:53:58.761862 Ultimate Maps by Supsystic < 1.2.16 - Admin+ Stored XSS
The Ultimate Maps by Supsystic WordPress plugin before 1.2.16 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Published: 2024-01-16T15:57:02.536Z
Updated: 2025-06-02T15:09:29.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24274 vulnerable 2026-06-03 14:43:56.690368 Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)
The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
Published: 2021-05-05T18:28:48.000Z
Updated: 2024-08-03T19:28:22.822Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.