100plugins

Products

Product	CVEs	Exploited	Latest
Open User Map	6	–	Sep 8, 2026
Open User Map – Interactive Leaflet Maps	1	–	Jul 24, 2026
Open User Map PRO	1	–	Jun 11, 2026

CVE-2026-84818 High 7.1 WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2026-66445 Medium 6.5 WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2026-15755 Medium 6.4 Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.4%
CVE-2026-2827 Medium 4.7 Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification' 0.2%
CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
CVE-2025-68002 Medium 6.5 WordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerability 0.4%
CVE-2025-57953 Medium 6.5 WordPress Open User Map Plugin <= 1.4.14 - Cross Site Scripting (XSS) Vulnerability 0.3%
CVE-2023-45056 Medium 5.9 WordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS) 0.4%