Supsystic
- Total products in the ecosystem
- 21
- Total vulnerabilities (90 days)
- 19
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, Supsystic recorded 19 security vulnerabilities in the last 90 days across 5 products, including 12 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Ultimate Maps by Supsystic had the most security vulnerabilities in the Supsystic ecosystem, with 6 vulnerabilities—approximately 31.58% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-119484WordPress Photo Gallery by Supsystic plugin <= 1.21.6 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-115591WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerabilityCVE-2026-115595WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerabilityCVE-2026-102399WordPress Photo Gallery by Supsystic plugin <= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-102398WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-119484WordPress Photo Gallery by Supsystic plugin <= 1.21.6 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes |
| Affected productPhoto Gallery by Supsystic |
| Published11/07/2026 |
| SeverityMedium |
CVE-2026-115591WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Affected productContact Form by Supsystic | Published10/28/2026 | SeverityHigh |
|---|
CVE-2026-115595WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productContact Form by Supsystic | Published10/26/2026 | SeverityMedium |
|---|
CVE-2026-102399WordPress Photo Gallery by Supsystic plugin <= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Affected productPhoto Gallery by Supsystic | Published09/30/2026 | SeverityMedium |
|---|
CVE-2026-102398WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productPopup by Supsystic | Published09/30/2026 | SeverityHigh |
|---|
CVE-2026-102397WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Maps by Supsystic | Published09/30/2026 | SeverityMedium |
|---|
CVE-2026-102396WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Maps by Supsystic | Published09/30/2026 | SeverityHigh |
|---|
CVE-2026-102395WordPress Easy Google Maps plugin <= 1.14.6 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEasy Google Maps | Published09/30/2026 | SeverityHigh |
|---|
CVE-2026-85309WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Maps by Supsystic | Published09/03/2026 | SeverityMedium |
|---|
CVE-2026-73381WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability | Exploitation statusNot exploited | FixYes | Affected productPopup by Supsystic | Published08/18/2026 | SeverityCritical |
|---|
CVE-2026-73380WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productPopup by Supsystic | Published08/18/2026 | SeverityCritical |
|---|
CVE-2026-73379WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability | Exploitation statusNot exploited | FixYes | Affected productContact Form by Supsystic | Published08/18/2026 | SeverityMedium |
|---|
CVE-2026-73378WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productContact Form by Supsystic | Published08/18/2026 | SeverityHigh |
|---|
CVE-2026-73377WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Maps by Supsystic | Published08/18/2026 | SeverityHigh |
|---|
CVE-2026-73376WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Maps by Supsystic | Published08/18/2026 | SeverityCritical |
|---|
CVE-2026-73375WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Maps by Supsystic | Published08/18/2026 | SeverityHigh |
|---|
CVE-2026-73367WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability | Exploitation statusNot exploited | FixYes | Affected productEasy Google Maps | Published08/18/2026 | SeverityHigh |
|---|
CVE-2026-73366WordPress Easy Google Maps plugin <= 1.13.0 - PHP Object Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productEasy Google Maps | Published08/18/2026 | SeverityCritical |
|---|
CVE-2026-27537WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productPopup by Supsystic | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-24628WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productPhoto Gallery by Supsystic | Published07/23/2026 | SeverityMedium |
|---|
CVE-2020-37246WordPress Plugin Supsystic Backup 2.3.9 Local File Inclusion | Exploitation statusActively exploited | FixNo | Affected productBackup | Published05/16/2026 | SeverityMedium |
|---|
CVE-2020-37245WordPress Plugin Supsystic Digital Publications 1.6.9 Path Traversal XSS | Exploitation statusActively exploited | FixNo | Affected productDigital Publications | Published05/16/2026 | SeverityHigh |
|---|
CVE-2020-37244WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx | Exploitation statusActively exploited | FixNo | Affected productMembership | Published05/16/2026 | SeverityHigh |
|---|
CVE-2020-37243WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS | Exploitation statusActively exploited | FixNo | Affected productPricing Table | Published05/16/2026 | SeverityHigh |
|---|
CVE-2020-37242WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx | Exploitation statusActively exploited | FixNo | Affected productUltimate Maps | Published05/16/2026 | SeverityHigh |
|---|
CVE-2025-52753WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productContact Form by Supsystic | Published10/22/2025 | SeverityHigh |
|---|
CVE-2025-32138WordPress Easy Google Maps plugin <= 1.11.18 - XML External Entity vulnerability | Exploitation statusNot exploited | FixYes | Affected productEasy Google Maps | Published04/04/2025 | SeverityMedium |
|---|
CVE-2024-56253WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productData Tables Generator by Supsystic | Published01/02/2025 | SeverityMedium |
|---|
CVE-2023-51353WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerability | Exploitation statusActively exploited | FixYes | Affected productPopup by Supsystic | Published12/09/2024 | SeverityMedium |
|---|
CVE-2024-52434WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability | Exploitation statusNot exploited | FixYes | Affected productPopup by Supsystic | Published11/18/2024 | SeverityCritical |
|---|
CVE-2024-48046WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productContact Form by Supsystic | Published10/17/2024 | SeverityMedium |
|---|
CVE-2024-48042WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability | Exploitation statusNot exploited | FixYes | Affected productContact Form by Supsystic | Published10/16/2024 | SeverityCritical |
|---|
CVE-2024-47330Broken Access Control vulnerability on multiple WordPress plugins by Supsystic | Exploitation statusNot exploited | FixYes | Affected productSlider by Supsystic | Published09/26/2024 | SeverityMedium |
|---|
CVE-2024-32790WordPress Pricing Table by Supsystic plugin <= 1.9.12 - Content Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productPricing Table by Supsystic | Published05/17/2024 | SeverityMedium |
|---|
CVE-2024-33910WordPress Digital Publications by Supsystic plugin <= 1.7.7 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productDigital Publications by Supsystic | Published05/06/2024 | SeverityMedium |
|---|
CVE-2024-32829WordPress Data Tables Generator by Supsystic plugin <= 1.10.31 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productData Tables Generator by Supsystic | Published04/26/2024 | SeverityMedium |
|---|
CVE-2023-25043WordPress Data Tables Generator by Supsystic Plugin <= 1.10.25 is vulnerable to Broken Access Control | Exploitation statusNot exploited | FixYes | Affected productData Tables Generator | Published04/17/2024 | SeverityMedium |
|---|
CVE-2024-32089WordPress Digital Publications by Supsystic plugin <= 1.7.7 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Affected productDigital Publications by Supsystic | Published04/15/2024 | SeverityMedium |
|---|
CVE-2024-31421WordPress Popup by Supsystic plugin <= 1.10.27 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productPopup by Supsystic | Published04/15/2024 | SeverityMedium |
|---|
CVE-2024-31271WordPress Ultimate Maps plugin <= 1.2.16 - Cross Site Request Forgery vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Maps by Supsystic | Published04/12/2024 | SeverityMedium |
|---|
CVE-2024-31269WordPress Easy Google Maps plugin <= 1.11.11 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEasy Google Maps | Published04/12/2024 | SeverityMedium |
|---|
CVE-2024-30448WordPress Slider by Supsystic plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productSlider by Supsystic | Published03/29/2024 | SeverityMedium |
|---|
CVE-2024-30237WordPress Slider by Supsystic plugin <= 1.8.10 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productSlider by Supsystic | Published03/28/2024 | SeverityHigh |
|---|
CVE-2024-29921WordPress Photo Gallery by Supsystic plugin <= 1.15.16 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productPhoto Gallery by Supsystic | Published03/27/2024 | SeverityMedium |
|---|
CVE-2023-49191WordPress GDPR Cookie Consent by Supsystic Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS) | Exploitation statusNot confirmed | FixYes | Affected productGDPR Cookie Consent by Supsystic | Published12/15/2023 | SeverityMedium |
|---|
CVE-2023-45068WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productContact Form by Supsystic | Published10/12/2023 | SeverityMedium |
|---|
CVE-2023-33926WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productEasy Google Maps | Published05/28/2023 | SeverityHigh |
|---|
CVE-2023-22714WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productComing Soon by Supsystic | Published05/22/2023 | SeverityMedium |
|---|
CVE-2022-47155WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productSlider by Supsystic | Published03/14/2023 | SeverityMedium |
|---|
CVE-2022-33960WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities | Exploitation statusNot exploited | FixYes | Affected productSocial Share Buttons by Supsystic (WordPress plugin) | Published07/22/2022 | SeverityHigh |
|---|
56 Results | Page 1 of 2