100plugins vulnerabilities
8 published CVEs name 100plugins among the affected products.
- 8Published CVEs8 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-84818
WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability
100plugins · Open User Map
High7.1 - CVE-2026-66445
WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability
100plugins · Open User Map
Medium6.5 - CVE-2026-15755
Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
100plugins · Open User Map – Interactive Leaflet Maps
Medium6.4 - CVE-2026-2827
Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification'
100plugins · Open User Map PRO
Medium4.7 - CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2025-68002
WordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerability
100plugins · Open User Map
Medium6.5 - CVE-2025-57953
WordPress Open User Map Plugin <= 1.4.14 - Cross Site Scripting (XSS) Vulnerability
100plugins · Open User Map
Medium6.5 - CVE-2023-45056
WordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)
100plugins · Open User Map
Medium5.9