WordPress plugin
CM Map Locations – Visualize and share your locations in a few clicks security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium2
- Low0
All CM Map Locations – Visualize and share your locations in a few clicks vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action ≤2.1.8Update to 2.1.9 | CVE-2026-16601 |
- High8.8Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action
≤2.1.8Update to 2.1.9
CM Map Locations – Visualize and share your locations in a few clicks: common questions
Does CM Map Locations – Visualize and share your locations in a few clicks have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in CM Map Locations – Visualize and share your locations in a few clicks: 1 high, 2 medium. None are known to affect version null.
How do I check which version of CM Map Locations – Visualize and share your locations in a few clicks I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CM Map Locations – Visualize and share your locations in a few clicks vulnerability?
CVE-2026-16601, published Aug 24, 2026: CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action. Severity: High (CVSS 8.8).
Is any CM Map Locations – Visualize and share your locations in a few clicks vulnerability listed in CISA KEV?
No. None of the known CM Map Locations – Visualize and share your locations in a few clicks vulnerabilities is currently listed in the CISA KEV catalog.