Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-25323 2 Mika, Wordpress 2 Osm, Wordpress 2026-04-16 4.3 Medium
Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a through <= 6.1.12.
CVE-2026-33559 2 Mika, Wordpress 2 Openstreetmap, Wordpress 2026-03-30 N/A
WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/editing privilege can embed some malicious script with a crafted HTTP request. When a victim user accesses this page, the script may be executed in the user's web browser.