Skip to content
OpenAdvisories

Vendor

100plugins

8 known vulnerabilities.

100plugins at a glance

Last 12 months
6
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 1 vulnerability Jun July 2026: 2 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202610
Aug 202600
Jul 202620
Jun 202610
May 202610
Apr 202600
Mar 202600
Feb 202610
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202510
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Open User Map 6 Open User Map PRO 1 Open User Map – Interactive Leaflet Maps 1
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 7.1
    CVE-2026-84818

    WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

    100plugins Open User Map
  • Medium 6.5
    CVE-2026-66445

    WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions.

    100plugins Open User Map
  • Medium 6.4
    CVE-2026-15755

    Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The Open User Map – Interactive Leaflet Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.4.45 due to insufficient input sanitization and output escaping. This makes it poss…

    100plugins Open User Map – Interactive Leaflet Maps Web / CMS
  • Medium 4.7
    CVE-2026-2827

    Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification'

    The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oum_location_notification' parameter in versions up to, and including, 1.4.31 due to insufficient input sanitization and output escaping. This makes it possible f…

    100plugins Open User Map PRO Web / CMS
  • Medium 6.1
    CVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

    bPlugins webfactory unitecms nicheaddons Web / CMS
  • Medium 6.5
    CVE-2025-68002

    WordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects Open User Map: from n/a through <= 1.4.16.

    100plugins Open User Map
  • Medium 6.5
    CVE-2025-57953

    WordPress Open User Map Plugin <= 1.4.14 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 100plugins Open User Map open-user-map allows DOM-Based XSS.This issue affects Open User Map: from n/a through <= 1.4.14.

    100plugins Open User Map
  • Medium 5.9
    CVE-2023-45056

    WordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 100plugins Open User Map plugin <= 1.3.26 versions.

    100plugins Open User Map