WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Ultimate Maps by Supsystic

Ultimate Maps by Supsystic is the best Google Maps alternative. It includes OpenStreetMap (OSM), Bing Maps, MapBox and Thunderforest maps services

5Reported vulnerabilities
8.1Highest CVSS score
1.5.2Latest version
10,000+Active installs

What to do now

Update Ultimate Maps by Supsystic to 1.5.0 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 11, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2026-73376 High 8.1 0.4% Before 1.5.0 1.5.0 August 18, 2026
CVE-2026-73375 High 7.2 0.2% Before 1.5.0 1.5.0 August 18, 2026
WF-758e23e4-72e6-4dc1-94f9-d02b75bb9857 High 7.2 — Before 1.1.17 1.1.17 February 8, 2021
CVE-2026-73377 Medium 5.3 0.3% Before 1.5.0 1.5.0 August 18, 2026
CVE-2024-31271 Medium 4.3 0.2% 1.2.16 and earlier 1.2.17 April 5, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.