Approved changes feed: RSS · Atom

cpe:2.3:a:peprodev:peprodev_branches_map_(mapify):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPeprodev (2f1d3423-2e88-55ca-9a95-7c51619a29ef)
ProductPeprodev Branches Map (Mapify) (35f8018f-cd88-5b92-8ae9-d4e159c47b0b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9373 vulnerable 2026-11-03 10:06:28.544049 PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The PeproDev Branches Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2026-10-14T07:43:32.584Z
Updated: 2026-10-15T16:43:49.219Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.