Skip to content
OpenAdvisories

Vendor

supsystic

56 known vulnerabilities.

Products

Contact Form by Supsystic 9 Ultimate Maps by Supsystic 8 Popup by Supsystic 8 Easy Google Maps 6 Slider by Supsystic 4 Photo Gallery by Supsystic 4 Digital Publications by Supsystic 2 Data Tables Generator by Supsystic 2 Social Share Buttons by Supsystic (WordPress plugin) 2 Membership 1 Popup Plugin 1 Ultimate Maps 1 Coming Soon by Supsystic 1 GDPR Cookie Consent by Supsystic 1 Pricing Table 1 Social Share Buttons by Supsystic 1 Pricing Table by Supsystic 1 Photo Gallery by Supsystic (WordPress plugin) 1 Backup 1 Data Tables Generator 1 Digital Publications 1
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • High 7.5
    CVE-2026-115591

    WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Retrieve Embedded Sensitive Data.This issue affects Contact Form by Supsystic: from n/a through 1.10.5.

    supsystic Contact Form by Supsystic
  • High 7.1
    CVE-2026-102398

    WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions.

    supsystic Popup by Supsystic
  • High 7.1
    CVE-2026-102396

    WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions.

    supsystic Ultimate Maps by Supsystic
  • High 7.1
    CVE-2026-102395

    WordPress Easy Google Maps plugin <= 1.14.6 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Easy Google Maps <= 1.14.6 versions.

    supsystic Easy Google Maps
  • High 7.1
    CVE-2026-73378

    WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.

    supsystic Contact Form by Supsystic
  • High 7.5
    CVE-2026-73377

    WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions.

    supsystic Ultimate Maps by Supsystic
  • High 7.1
    CVE-2026-73375

    WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.

    supsystic Ultimate Maps by Supsystic
  • High 7.2
    CVE-2026-73367

    WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability

    Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.

    supsystic Easy Google Maps
  • High 7.5
    CVE-2020-37245

    WordPress Plugin Supsystic Digital Publications 1.6.9 Path Traversal XSS

    Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attackers to access files outside the web root by injecting directory traversal sequences. Additionally, the plugin fails to sanitize input fiel…

    supsystic Digital Publications Web / CMS
  • High 8.2
    CVE-2020-37244

    WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx

    Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters. Attackers can send GET requests to the badges mod…

    supsystic Membership Web / CMS
  • High 8.2
    CVE-2020-37243

    WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS

    Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL queries through the getListForTbl action. The plugin also contains stored cross-site scripting vul…

    supsystic Pricing Table Web / CMS
  • High 8.2
    CVE-2020-37242

    WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx

    Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can send crafted requests to the getListForTb…

    supsystic Ultimate Maps Web / CMS
  • High 7.1
    CVE-2025-52753

    WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Reflected XSS.This issue affects Contact Form by Supsystic: from n/a through <= 1.7.36.

    supsystic Contact Form by Supsystic
  • High 7.6
    CVE-2024-30237

    WordPress Slider by Supsystic plugin <= 1.8.10 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Supsystic Slider by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.10.

    supsystic Slider by Supsystic
  • High 7.1
    CVE-2023-33926

    WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps plugin <= 1.11.7 versions.

    supsystic Easy Google Maps
  • High 8.5
    CVE-2022-33960

    WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities

    Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

    supsystic Social Share Buttons by Supsystic (WordPress plugin) Web / CMS