# cve.now: Supsystic

The newest entries naming Supsystic as an affected vendor (up to 200), of 56 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119484](https://cve.now/CVE-2026-119484.md): WordPress Photo Gallery by Supsystic plugin \<= 1.21.6 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.3)
- [CVE-2026-115591](https://cve.now/CVE-2026-115591.md): WordPress Contact Form by Supsystic plugin \<= 1.10.5 - Sensitive Data Exposure vulnerability (CVSS 7.5)
- [CVE-2026-115595](https://cve.now/CVE-2026-115595.md): WordPress Contact Form by Supsystic plugin \<= 1.10.7 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-102397](https://cve.now/CVE-2026-102397.md): WordPress Ultimate Maps by Supsystic plugin \<= 1.5.5 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-102399](https://cve.now/CVE-2026-102399.md): WordPress Photo Gallery by Supsystic plugin \<= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- [CVE-2026-102398](https://cve.now/CVE-2026-102398.md): WordPress Popup by Supsystic plugin \<= 1.13.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-102396](https://cve.now/CVE-2026-102396.md): WordPress Ultimate Maps by Supsystic plugin \<= 1.5.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-102395](https://cve.now/CVE-2026-102395.md): WordPress Easy Google Maps plugin \<= 1.14.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-85309](https://cve.now/CVE-2026-85309.md): WordPress Ultimate Maps by Supsystic plugin \<= 1.5.3 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-73381](https://cve.now/CVE-2026-73381.md): WordPress Popup by Supsystic plugin \<= 1.13.0 - Broken Authentication vulnerability (CVSS 9.1)
- [CVE-2026-73380](https://cve.now/CVE-2026-73380.md): WordPress Popup by Supsystic plugin \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-73379](https://cve.now/CVE-2026-73379.md): WordPress Contact Form by Supsystic plugin \< 1.10.0 - Bypass Vulnerability vulnerability (CVSS 6.5)
- [CVE-2026-73378](https://cve.now/CVE-2026-73378.md): WordPress Contact Form by Supsystic plugin \< 1.10.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-73377](https://cve.now/CVE-2026-73377.md): WordPress Ultimate Maps by Supsystic plugin \< 1.5.0 - Broken Access Control vulnerability (CVSS 7.5)
- [CVE-2026-73376](https://cve.now/CVE-2026-73376.md): WordPress Ultimate Maps by Supsystic plugin \< 1.5.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-73375](https://cve.now/CVE-2026-73375.md): WordPress Ultimate Maps by Supsystic plugin \< 1.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-73367](https://cve.now/CVE-2026-73367.md): WordPress Easy Google Maps plugin \< 1.14.2 - Remote File Inclusion vulnerability (CVSS 7.2)
- [CVE-2026-73366](https://cve.now/CVE-2026-73366.md): WordPress Easy Google Maps plugin \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-27537](https://cve.now/CVE-2026-27537.md): WordPress Popup by Supsystic plugin \<= 1.11.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-24628](https://cve.now/CVE-2026-24628.md): WordPress Photo Gallery by Supsystic plugin \<= 1.16.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2020-37246](https://cve.now/CVE-2020-37246.md): WordPress Plugin Supsystic Backup 2.3.9 Local File Inclusion (CVSS 6.9)
- [CVE-2020-37245](https://cve.now/CVE-2020-37245.md): WordPress Plugin Supsystic Digital Publications 1.6.9 Path Traversal XSS (CVSS 8.7)
- [CVE-2020-37244](https://cve.now/CVE-2020-37244.md): WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx (CVSS 8.8)
- [CVE-2020-37243](https://cve.now/CVE-2020-37243.md): WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS (CVSS 8.8)
- [CVE-2020-37242](https://cve.now/CVE-2020-37242.md): WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx (CVSS 8.8)
- [CVE-2025-52753](https://cve.now/CVE-2025-52753.md): WordPress Contact Form by Supsystic plugin \<= 1.7.36 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-32138](https://cve.now/CVE-2025-32138.md): WordPress Easy Google Maps plugin \<= 1.11.18 - XML External Entity vulnerability (CVSS 6.6)
- [CVE-2024-56253](https://cve.now/CVE-2024-56253.md): WordPress Data Tables Generator by Supsystic plugin \<= 1.10.36 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2023-51353](https://cve.now/CVE-2023-51353.md): WordPress Popup by Supsystic plugin \<= 1.10.19 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-52434](https://cve.now/CVE-2024-52434.md): WordPress Popup by Supsystic plugin \<= 1.10.29 - Remote Code Execution (RCE) vulnerability (CVSS 9.1)
- [CVE-2024-48046](https://cve.now/CVE-2024-48046.md): WordPress Contact Form by Supsystic plugin \<= 1.7.28 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-48042](https://cve.now/CVE-2024-48042.md): WordPress Contact Form by Supsystic plugin \<= 1.7.28 - Remote Code Execution (RCE) vulnerability (CVSS 9.1)
- [CVE-2024-47330](https://cve.now/CVE-2024-47330.md): Broken Access Control vulnerability on multiple WordPress plugins by Supsystic (CVSS 4.3)
- [CVE-2024-32790](https://cve.now/CVE-2024-32790.md): WordPress Pricing Table by Supsystic plugin \<= 1.9.12 - Content Injection vulnerability (CVSS 4.3)
- [CVE-2024-33910](https://cve.now/CVE-2024-33910.md): WordPress Digital Publications by Supsystic plugin \<= 1.7.7 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-32829](https://cve.now/CVE-2024-32829.md): WordPress Data Tables Generator by Supsystic plugin \<= 1.10.31 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2023-25043](https://cve.now/CVE-2023-25043.md): WordPress Data Tables Generator by Supsystic Plugin \<= 1.10.25 is vulnerable to Broken Access Control (CVSS 4.3)
- [CVE-2024-31421](https://cve.now/CVE-2024-31421.md): WordPress Popup by Supsystic plugin \<= 1.10.27 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-32089](https://cve.now/CVE-2024-32089.md): WordPress Digital Publications by Supsystic plugin \<= 1.7.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-31269](https://cve.now/CVE-2024-31269.md): WordPress Easy Google Maps plugin \<= 1.11.11 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-31271](https://cve.now/CVE-2024-31271.md): WordPress Ultimate Maps plugin \<= 1.2.16 - Cross Site Request Forgery vulnerability (CVSS 4.3)
- [CVE-2024-30448](https://cve.now/CVE-2024-30448.md): WordPress Slider by Supsystic plugin \<= 1.8.10 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-30237](https://cve.now/CVE-2024-30237.md): WordPress Slider by Supsystic plugin \<= 1.8.10 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2024-29921](https://cve.now/CVE-2024-29921.md): WordPress Photo Gallery by Supsystic plugin \<= 1.15.16 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2023-49191](https://cve.now/CVE-2023-49191.md): WordPress GDPR Cookie Consent by Supsystic Plugin \<= 2.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-45068](https://cve.now/CVE-2023-45068.md): WordPress Contact Form by Supsystic Plugin \<= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2023-33926](https://cve.now/CVE-2023-33926.md): WordPress Easy Google Maps Plugin \<= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 7.1)
- [CVE-2023-22714](https://cve.now/CVE-2023-22714.md): WordPress Coming Soon by Supsystic Plugin \<= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2022-47155](https://cve.now/CVE-2022-47155.md): WordPress Slider by Supsystic Plugin \<= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2022-27235](https://cve.now/CVE-2022-27235.md): WordPress Social Share Buttons by Supsystic plugin \<= 2.2.3 - Multiple Broken Access Control vulnerabilities (CVSS 6.3)
- [CVE-2022-33960](https://cve.now/CVE-2022-33960.md): WordPress Social Share Buttons by Supsystic plugin \<= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities (CVSS 8.5)
- [CVE-2017-20065](https://cve.now/CVE-2017-20065.md): Supsystic Popup Plugin cross-site request forgery (CVSS 4.3)
- [CVE-2021-36891](https://cve.now/CVE-2021-36891.md): WordPress Photo Gallery by Supsystic plugin \<= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change (CVSS 5.4)
- [CVE-2021-24276](https://cve.now/CVE-2021-24276.md): Contact Form by Supsystic \< 1.7.15 - Reflected Cross-Site scripting (XSS) (no CVSS)
- [CVE-2021-24275](https://cve.now/CVE-2021-24275.md): Popup by Supsystic \< 1.10.5 - Reflected Cross-Site scripting (XSS) (no CVSS)
- [CVE-2021-24274](https://cve.now/CVE-2021-24274.md): Ultimate Maps by Supsystic \< 1.2.5 - Reflected Cross-Site scripting (XSS) (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/supsystic
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.