What is CVE-2026-15755?
CVE-2026-15755 is a Stored Cross-Site Scripting (XSS) vulnerability in the 'Open User Map – Interactive Leaflet Maps' plugin for WordPress via Shortcode Attributes. It affects versions up to 1.4.45 and allows authenticated attackers to execute scripts. Update the plugin to the latest version to mitigate the risk.
Azərbaycanca: CVE-2026-15755 WordPress üçün 'Open User Map – Interactive Leaflet Maps' plaginində "Shortcode Attributes" vasitəsilə Stored Cross-Site Scripting (XSS) zəifliyidir. 1.4.45 və daha əvvəlki versiyalar təsirlənir, autentifikasiya olunmuş hücumçulara təsir göstərməyə imkan verir. Plagini ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-79
FAQ2
Which WordPress plugin is affected by CVE-2026-15755?
This vulnerability affects the 'Open User Map – Interactive Leaflet Maps' plugin.
What action should be taken to mitigate CVE-2026-15755?
It is recommended to update the plugin to the latest version.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.