What’s Vulnerable › Products

hupe13 Extensions for Leaflet Map vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your hupe13 Extensions for Leaflet Map version is affected

Latest hupe13 Extensions for Leaflet Map vulnerabilities

• CVE-2026-103485 — Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property (CVSS 5.4)
• CVE-2026-114703 — WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-57380 — WordPress Extensions for Leaflet Map plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-5451 — Extensions for Leaflet Map <= 4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'elevation-track' Shortcode (CVSS 6.4)
• CVE-2025-66093 — WordPress Extensions for Leaflet Map plugin <= 4.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-12369 — Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2023-31074 — WordPress Extensions for Leaflet Map Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)