Supsystic
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Contact Form by Supsystic | 9 | – | Oct 28, 2026 |
| Ultimate Maps by Supsystic | 8 | – | Sep 30, 2026 |
| Popup by Supsystic | 8 | – | Sep 30, 2026 |
| Easy Google Maps | 6 | – | Sep 30, 2026 |
| Photo Gallery by Supsystic | 4 | – | Nov 7, 2026 |
| Slider by Supsystic | 4 | – | Sep 26, 2024 |
| Social Share Buttons by Supsystic (WordPress plugin) | 2 | – | Jul 22, 2022 |
| Data Tables Generator by Supsystic | 2 | – | Jan 2, 2025 |
| Digital Publications by Supsystic | 2 | – | May 6, 2024 |
| Backup | 1 | – | May 16, 2026 |
| Photo Gallery by Supsystic (WordPress plugin) | 1 | – | Jun 15, 2022 |
| Data Tables Generator | 1 | – | Apr 17, 2024 |
| Pricing Table | 1 | – | May 16, 2026 |
| Pricing Table by Supsystic | 1 | – | May 17, 2024 |
| Coming Soon by Supsystic | 1 | – | May 22, 2023 |
| Social Share Buttons by Supsystic | 1 | – | Sep 26, 2024 |
| Ultimate Maps | 1 | – | May 16, 2026 |
| Digital Publications | 1 | – | May 16, 2026 |
| GDPR Cookie Consent by Supsystic | 1 | – | Dec 15, 2023 |
| Membership | 1 | – | May 16, 2026 |
Exploited and recent CVEs
- CVE-2026-119484 WordPress Photo Gallery by Supsystic plugin <= 1.21.6 - Cross Site Request Forgery (CSRF) vulnerability –
- CVE-2026-115591 WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2026-115595 WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability 0.2%
- CVE-2026-102397 WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability 0.2%
- CVE-2026-102399 WordPress Photo Gallery by Supsystic plugin <= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2026-102398 WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-102396 WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-102395 WordPress Easy Google Maps plugin <= 1.14.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-85309 WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerability 0.3%
- CVE-2026-73381 WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability 0.5%
- CVE-2026-73380 WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability 0.6%
- CVE-2026-73379 WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability 0.3%
- CVE-2026-73378 WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-73377 WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability 0.3%
- CVE-2026-73376 WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability 0.6%
- CVE-2026-73375 WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-73367 WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability 0.3%
- CVE-2026-73366 WordPress Easy Google Maps plugin <= 1.13.0 - PHP Object Injection vulnerability 0.6%
- CVE-2026-27537 WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-24628 WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2020-37246 WordPress Plugin Supsystic Backup 2.3.9 Local File Inclusion 0.7%
- CVE-2020-37245 WordPress Plugin Supsystic Digital Publications 1.6.9 Path Traversal XSS 0.5%
- CVE-2020-37244 WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx 0.3%
- CVE-2020-37243 WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS 0.3%
- CVE-2020-37242 WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx 0.3%
- CVE-2025-52753 WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-32138 WordPress Easy Google Maps plugin <= 1.11.18 - XML External Entity vulnerability 0.5%
- CVE-2024-56253 WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerability 0.3%
- CVE-2023-51353 WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerability 0.6%
- CVE-2024-52434 WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability 1.1%