Skip to content
OpenAdvisories

Vendor

supsystic

56 known vulnerabilities.

Products

Contact Form by Supsystic 9 Ultimate Maps by Supsystic 8 Popup by Supsystic 8 Easy Google Maps 6 Slider by Supsystic 4 Photo Gallery by Supsystic 4 Digital Publications by Supsystic 2 Data Tables Generator by Supsystic 2 Social Share Buttons by Supsystic (WordPress plugin) 2 Membership 1 Popup Plugin 1 Ultimate Maps 1 Coming Soon by Supsystic 1 GDPR Cookie Consent by Supsystic 1 Pricing Table 1 Social Share Buttons by Supsystic 1 Pricing Table by Supsystic 1 Photo Gallery by Supsystic (WordPress plugin) 1 Backup 1 Data Tables Generator 1 Digital Publications 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-73380

    WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions.

    supsystic Popup by Supsystic
  • Critical 9.1
    CVE-2026-73381

    WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability

    Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions.

    supsystic Popup by Supsystic
  • Critical 9.8
    CVE-2026-73376

    WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.

    supsystic Ultimate Maps by Supsystic
  • Critical 9.8
    CVE-2026-73366

    WordPress Easy Google Maps plugin <= 1.13.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.

    supsystic Easy Google Maps
  • Critical 9.1
    CVE-2024-52434

    WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability

    Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Injection.This issue affects Popup by Supsystic: from n/a through <= 1.10.29.

    supsystic Popup by Supsystic
  • Critical 9.1
    CVE-2024-48042

    WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability

    Deserialization of Untrusted Data vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Command Injection.This issue affects Contact Form by Supsystic: from n/a through <= 1.7.28.

    supsystic Contact Form by Supsystic