CVE-2026-107743 | Mapster WP Maps Plugin up to 2.0.5 on WordPress REST API save-mapmaker mapster_write_config_to_acf cross site scripting

October 29, 2026 Yanac

A vulnerability was found in Mapster WP Maps Plugin up to 2.0.5 on WordPress. It has been rated as problematic. This affects the function mapster_write_config_to_acf of the file /wp-json/mapster-wp-maps/save-mapmaker of the component REST API. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-107743. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More