Skip to content
OpenAdvisories

Vendor

manchumahara

3 known vulnerabilities.

Products

CBX Map for Google Map & OpenStreetMap 1 CBX 5 Star Rating & Review 1 CBX Bookmark & Favorite 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-6864

    CBX 5 Star Rating & Review <= 1.0.7 - Reflected Cross-Site Scripting via 'page' Parameter

    The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for una…

    manchumahara CBX 5 Star Rating & Review Web / CMS
  • Medium 6.5
    CVE-2025-13652 Scanner template

    CBX Bookmark & Favorite <= 2.0.4 - Authenticated (Subscriber+) SQL Injection via `orderby` Parameter

    The CBX Bookmark & Favorite plugin for WordPress is vulnerable to generic SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t…

    manchumahara CBX Bookmark & Favorite Web / CMS
  • Medium 6.4
    CVE-2025-9123

    CBX Map for Google Map & OpenStreetMap <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The CBX Map for Google Map & OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the popup heading and location address parameters in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output es…

    manchumahara CBX Map for Google Map & OpenStreetMap Web / CMS