Known vulnerabilities in Geo Mashup
Include Google and OpenStreetMap maps in posts and pages, and map posts, pages, and other objects on global maps. Make WordPress into a GeoCMS.
16Reported vulnerabilities
9.8Highest CVSS score
1.13.21Latest version
1,000+Active installs
What to do now
Update Geo Mashup to 1.13.19 or later.
16 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2018-14071 | Critical | 3.1% | Before 1.10.4 | 1.10.4 |
July 16, 2018 |
| CVE-2026-66450 | High | 0.3% | 1.13.18 and earlier | 1.13.19 |
August 7, 2026 |
| CVE-2025-48293 | High | 0.4% | 1.13.16 and earlier | 1.13.17 |
July 25, 2025 |
| CVE-2026-4060 | High | 1.4% | 0 to 1.13.18 (inclusive) | 1.13.19 |
May 2, 2026 |
| CVE-2026-2416 | High | 1.4% | 0 to 1.13.17 (inclusive) | 1.13.18 |
February 25, 2026 |
| CVE-2026-4062 | High | 0.3% | 0 to 1.13.18 (inclusive) | 1.13.19 |
May 2, 2026 |
| CVE-2026-4061 | High | 0.3% | 0 to 1.13.18 (inclusive) | 1.13.19 |
May 2, 2026 |
| CVE-2026-66449 | High | 0.2% | 1.13.18 and earlier | 1.13.19 |
August 7, 2026 |
| CVE-2026-42734 | High | 0.2% | 1.13.19 and earlier | 1.13.20 |
May 26, 2026 |
| CVE-2026-48967 | Medium | 0.3% | 1.13.19 and earlier | 1.13.20 |
June 3, 2026 |
| CVE-2026-6457 | Medium | 0.4% | 0 to 1.13.19 (inclusive) | 1.13.20 |
May 2, 2026 |
| CVE-2024-8990 | Medium | 0.4% | 0 to 1.13.13 (inclusive) | 1.13.14 |
October 1, 2024 |
| CVE-2024-44008 | Medium | 0.3% | 1.13.12 and earlier | 1.13.13 |
September 16, 2024 |
| CVE-2026-27427 | Medium | 0.2% | 1.13.18 and earlier | 1.13.19 |
May 26, 2026 |
| CVE-2026-7552 | Medium | 0.3% | 0 to 1.13.19 (inclusive) | 1.13.20 |
May 28, 2026 |
| CVE-2015-1383 | Medium | 2.0% | 1.8.2 and earlier | 1.8.3 |
February 2, 2015 |