UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-103485

Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property

Severity
Medium 5.4
Published
29 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
29 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Extensions Leaflet Map (WordPress plugin)WordPress plugins · wp-plugin:extensions-leaflet-map
  • Every version up to 5.4

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-103485