Vulnerabilities in 100plugins
8 resultsCVE-2026-15755MEDIUMOpen User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.4%CVE-2025-68002MEDIUMWordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2023-45056MEDIUMWordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2025-57953MEDIUMWordPress Open User Map Plugin <= 1.4.14 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2026-84818HIGHWordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-66445MEDIUMWordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-2827MEDIUMOpen User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification'EPSS 0.2%