WordPress plugin
OSM Map Widget for Elementor security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All OSM Map Widget for Elementor vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL ≤1.3.0Update to 1.3.1 | CVE-2025-8619 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter ≤1.2.2Update to 1.3.0 | CVE-2024-4663 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
≤1.3.0Update to 1.3.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
≤1.2.2Update to 1.3.0
OSM Map Widget for Elementor: common questions
Does OSM Map Widget for Elementor have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in OSM Map Widget for Elementor: 2 medium. None are known to affect version null.
How do I check which version of OSM Map Widget for Elementor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent OSM Map Widget for Elementor vulnerability?
CVE-2025-8619, published Aug 28, 2025: OSM Map Widget for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL. Severity: Medium (CVSS 6.4).
Is any OSM Map Widget for Elementor vulnerability listed in CISA KEV?
No. None of the known OSM Map Widget for Elementor vulnerabilities is currently listed in the CISA KEV catalog.