mapster_wp_maps vulnerabilities

CVEs whose affected-version data names the mapster_wp_maps package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118638High· 7.5

6d ago

Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route

The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowing unauthenticated attackers to overwrite the title of arbitrary posts, create arbitrary publishe…

▾ TwilightEPSS 0.25%via CVEORG