hupe13

Products

ProductCVEsExploitedLatest
Extensions for Leaflet Map7–Oct 29, 2026
DSGVO snippet for Leaflet Map and its Extensions1–Mar 26, 2026

Exploited and recent CVEs

  • CVE-2026-103485 Medium 5.4 Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property 0.3%
  • CVE-2026-114703 Medium 6.5 WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57380 High 7.1 WordPress Extensions for Leaflet Map plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-5451 Medium 6.4 Extensions for Leaflet Map <= 4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'elevation-track' Shortcode 0.2%
  • CVE-2026-4389 Medium 6.4 DSGVO snippet for Leaflet Map and its Extensions <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'unset' Attribute 0.2%
  • CVE-2025-66093 Medium 6.5 WordPress Extensions for Leaflet Map plugin <= 4.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-12369 Medium 6.4 Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2023-31074 High 7.1 WordPress Extensions for Leaflet Map Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS) 0.4%