What’s Vulnerable › Products
Dylan Kuhn Geo Mashup vulnerabilities
23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.
Check whether your Dylan Kuhn Geo Mashup version is affected
Latest Dylan Kuhn Geo Mashup vulnerabilities
- CVE-2026-115954 — WordPress Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerability (CVSS 5.4)
- CVE-2026-115953 — WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-111848 — WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-97250 — WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-78294 — WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-66450 — WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability (CVSS 8.1)
- CVE-2026-66449 — WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-48967 — WordPress Geo Mashup plugin <= 1.13.19 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-7552 — Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter (CVSS 5.3)
- CVE-2026-42734 — WordPress Geo Mashup plugin <= 1.13.19 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-27427 — WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-4062 — Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter (CVSS 7.5)
- CVE-2026-4061 — Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter (CVSS 7.5)
- CVE-2026-4060 — Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter (CVSS 7.5)
- CVE-2026-6457 — Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter (CVSS 6.5)
- CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
- CVE-2026-2416 — Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter (CVSS 7.5)
- CVE-2025-48293 — WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability (CVSS 9.8)
- CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
- CVE-2024-8990 — Geo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode (CVSS 6.4)
- CVE-2024-44008 — WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2018-14071 — (CVSS 9.8)
- CVE-2015-1383 — (CVSS 4.3)