Supsystic
Supsystic Ultimate Maps: vulnerabilidades y CVE
Supsystic Ultimate Maps tiene 10 vulnerabilidades publicadas, 7 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses7
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-102397 | Media (6.5) | 0.27% | — | 30 sept 2026 | Unauthenticated Broken Access Control in Ultimate Maps by Supsystic <= 1.5.5 versions. |
| CVE-2026-102396 | Alta (7.1) | 0.25% | — | 30 sept 2026 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions. |
| CVE-2026-85309 | Media (5.3) | 0.29% | — | 3 sept 2026 | Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Maps by Supsystic: from n/a through 1.5.3. |
| CVE-2026-73377 | Alta (7.5) | 0.35% | — | 18 ago 2026 | Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions. |
| CVE-2026-73376 | Crítica (9.8) | 0.56% | — | 18 ago 2026 | Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions. |
| CVE-2026-73375 | Alta (7.1) | 0.25% | — | 18 ago 2026 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions. |
| CVE-2020-37242 | Alta (8.8) | 0.28% | — | 16 may 2026 | Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can… |
| CVE-2024-31271 | Media (4.3) | 0.20% | — | 12 abr 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Ultimate Maps by Supsystic.This issue affects Ultimate Maps by Supsystic: from n/a through 1.2.16. |
| CVE-2023-6732 | Media (4.8) | 0.42% | — | 16 ene 2024 | The Ultimate Maps by Supsystic WordPress plugin before 1.2.16 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when… |
| CVE-2021-24274 | Media (6.1) | 18% | — | 5 may 2021 | The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.