High
CVE-2026-97250
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filters
Medium
CVE-2026-78294
Geo Mashup <= 1.13.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-66450
Geo Mashup <= 1.13.18 - Unauthenticated Local File Inclusion
High
CVE-2026-66449
Geo Mashup <= 1.13.18 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-48967
Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-7552
Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter
Medium
CVE-2026-27427
Geo Mashup <= 1.13.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-42734
Geo Mashup <= 1.13.19 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-6457
Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter
High
CVE-2026-4061
Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter
High
CVE-2026-4062
Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter
High
CVE-2026-4060
Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter
Medium
CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
High
CVE-2026-2416
Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter
High
CVE-2025-48293
Geo Mashup <= 1.13.16 - Unauthenticated Local File Inclusion
Medium
CVE-2024-8990
Geo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode
Medium
CVE-2024-44008
Geo Mashup <= 1.13.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
CVE-2018-14071
Geo Mashup - < 1.10.4 - Cross-Site Scripting
Medium
CVE-2015-1383
Geo Mashup < 1.8.3 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.