Medium · 5.3 CVE-2026-85309 EUVD-2026-70553GHSA-6jpp-gxx7-g3pq

WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerability

Published Sep 3, 2026 · Updated Sep 5, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Ultimate Maps by Supsystic: from n/a through 1.5.3.

Vendor	Product	Affected	Fixed
Supsystic	Ultimate Maps by Supsystic	≤ 1.5.3	—