Skip to content
OpenAdvisories

Product · 100plugins

Open User Map

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-66445

    WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions.

    100plugins Open User Map
  • Medium 6.1
    CVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

    bPlugins webfactory unitecms nicheaddons Web / CMS
  • Medium 6.5
    CVE-2025-68002

    WordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects Open User Map: from n/a through <= 1.4.16.

    100plugins Open User Map
  • Medium 6.5
    CVE-2025-57953

    WordPress Open User Map Plugin <= 1.4.14 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 100plugins Open User Map open-user-map allows DOM-Based XSS.This issue affects Open User Map: from n/a through <= 1.4.14.

    100plugins Open User Map
  • Medium 5.9
    CVE-2023-45056

    WordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 100plugins Open User Map plugin <= 1.3.26 versions.

    100plugins Open User Map