MiKa

Products

ProductCVEsExploitedLatest
OSM3–Feb 19, 2026
OpenStreetMap1–Mar 27, 2026
OSM – OpenStreetMap1–Jan 17, 2023

Exploited and recent CVEs

  • CVE-2026-33559 Medium 5.4 WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/edit 0.2%
  • CVE-2026-25323 Medium 4.3 WordPress OSM plugin <= 6.1.12 - Broken Access Control vulnerability 0.3%
  • CVE-2025-31557 Medium 6.5 WordPress OSM plugin <= 6.1.13 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-52355 Medium 6.5 WordPress OSM – OpenStreetMap plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2022-30544 Medium 4.3 WordPress OSM – OpenStreetMap Plugin <= 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%