Ccyberhobo

Products

Exploited and recent CVEs

• CVE-2026-7552 Medium 5.3 Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter 0.3%
• CVE-2026-4061 High 7.5 Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter 0.3%
• CVE-2026-4062 High 7.5 Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter 0.3%
• CVE-2026-4060 High 7.5 Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter 1.4%
• CVE-2026-6457 Medium 6.5 Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter 0.4%
• CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
• CVE-2026-2416 High 7.5 Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter 1.5%
• CVE-2024-8990 Medium 6.4 Geo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode 0.4%