hupe13 has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 6.0 (medium).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 6.0
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

CWE-79 2

Products

Extensions for Leaflet Map 1
extensions-leaflet-map 1

Follow hupe13:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

hupe13 vulnerabilities

CVEs affecting hupe13, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-103485Medium· 5.4

5d ago

Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feature.properties[<template-token>]' parameter in all versions up to, and including, 5.4 due to insufficient input sanit…

▾ Sunlithupe13 · Extensions for Leaflet MapEPSS 0.34%via CVEORG

CVE-2026-114703Medium· 6.5

1w ago

WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a thro…

▾ Sunlithupe13 · extensions-leaflet-mapEPSS 0.17%via CVEORG