ByteOS Network

CVE Vulnerability Details :

CVE-2026-7552

PUBLISHED

More Info Official Page

Assigner-Wordfence

Assigner Org ID-b15e7b5b-3da4-40ae-a43c-f7aa60e62599

Published At-28 May, 2026 | 06:45

Updated At-28 May, 2026 | 10:34

▼CVE Numbering Authority (CNA)

Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter

The Geo Mashup plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.13.19. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to expose sensitive plugin configuration data, including Google Maps API keys and GeoNames service credentials, to unauthenticated attackers.

Affected Products

Vendor

cyberhobo

Product

Geo Mashup

Default Status

unaffected

Versions

Affected

From 0 through 1.13.19 (semver)

Problem Types

Type	CWE ID	Description
CWE	CWE-862	CWE-862 Missing Authorization

Type: CWE

CWE ID: CWE-862

Description: CWE-862 Missing Authorization

Metrics

Version	Base score	Base severity	Vector
3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Credits

finder

Nguyen Minh Toan

Timeline

Event	Date
Vendor Notified	2026-04-30 19:19:35
Disclosed	2026-05-27 18:02:30

Event: Vendor Notified

Date: 2026-04-30 19:19:35

Event: Disclosed

Date: 2026-05-27 18:02:30

References

Hyperlink	Resource
https://www.wordfence.com/threat-intel/vulnerabilities/id/605dc24c-5b6e-479b-98dd-ad80c547824c?source=cve	N/A
https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/geo-mashup.php#L528	N/A
https://plugins.trac.wordpress.org/browser/geo-mashup/tags/1.13.19/geo-mashup.php#L528	N/A
https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/geo-mashup.php#L1525	N/A
https://plugins.trac.wordpress.org/browser/geo-mashup/tags/1.13.19/geo-mashup.php#L1525	N/A
https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/geo-mashup.php#L515	N/A
https://plugins.trac.wordpress.org/browser/geo-mashup/tags/1.13.19/geo-mashup.php#L515	N/A
https://plugins.trac.wordpress.org/browser/geo-mashup/tags/1.13.18/geo-mashup.php#L528	N/A
https://plugins.trac.wordpress.org/browser/geo-mashup/tags/1.13.18/geo-mashup.php#L1525	N/A
https://plugins.trac.wordpress.org/browser/geo-mashup/tags/1.13.18/geo-mashup.php#L515	N/A
https://plugins.trac.wordpress.org/changeset/3503627/geo-mashup	N/A