geo-mashup vulnerabilities

CVEs whose affected-version data names the geo-mashup package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

5 CVEsRSS

CVE-2026-115954Medium· 5.4

2d ago

WordPress Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Geo Mashup: from n/a through 1.13.22.

▾ SunlitDylan Kuhn · geo-mashupEPSS 0.18%via CVEORG

CVE-2026-115953Medium· 6.5

2d ago

WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through 1.13.22.

▾ SunlitDylan Kuhn · geo-mashupEPSS 0.17%via CVEORG

CVE-2026-111848High· 7.1

1w ago

WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22.

▾ TwilightDylan Kuhn · geo-mashupEPSS 0.20%via CVEORG

CVE-2026-97250High· 7.1

4w ago

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

▾ TwilightDylan Kuhn · geo-mashupEPSS 0.14%via NVD

CVE-2026-78294Medium· 6.5

1mo ago

Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

▾ SunlitDylan Kuhn · geo-mashupEPSS 0.22%via NVD