What’s Vulnerable › Products

photoweblog OSM – OpenStreetMap vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your photoweblog OSM – OpenStreetMap version is affected

Latest photoweblog OSM – OpenStreetMap vulnerabilities

• CVE-2026-4429 — OSM <= 6.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker_name' Shortcode Attribute (CVSS 6.4)
• CVE-2026-33559 — (CVSS 5.1)
• CVE-2024-52355 — WordPress OSM – OpenStreetMap plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-8991 — OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes (CVSS 5.4)
• CVE-2024-3604 — OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) SQL Injection (CVSS 8.8)
• CVE-2024-3603 — OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2022-30544 — WordPress OSM – OpenStreetMap Plugin <= 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)