CVEs we hold for Supsystic

Records whose assigning authority named Supsystic as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-85309WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerabilitySupsystic

CVE-2026-83625Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Headersupsysticcom Contact Form by Supsystic

CVE-2026-73381WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerabilitySupsystic

CVE-2026-73380WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerabilitySupsystic

CVE-2026-73379WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerabilitySupsystic

CVE-2026-73378WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerabilitySupsystic

CVE-2026-73377WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerabilitySupsystic

CVE-2026-73376WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerabilitySupsystic

CVE-2026-73375WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Cross Site Scripting (XSS) vulnerabilitySupsystic

CVE-2026-73367WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerabilitysupsystic Easy Google Maps

CVE-2026-73366WordPress Easy Google Maps plugin <= 1.13.0 - PHP Object Injection vulnerabilitysupsystic Easy Google Maps

CVE-2026-4257Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionalitysupsysticcom Contact Form by Supsystic

CVE-2026-27537WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerabilitySupsystic

CVE-2026-24628WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerabilitySupsystic

CVE-2026-18322Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administratorsupsysticcom Smart Popup by Supsystic

CVE-2025-52753WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerabilitySupsystic

CVE-2025-32138WordPress Easy Google Maps plugin <= 1.11.18 - XML External Entity vulnerabilitysupsystic Easy Google Maps

CVE-2025-12089Data Tables Generator by Supsystic <= 1.10.45 - Authenticated (Admin+) Arbitrary File Deletionsupsysticcom Data Tables Generator by Supsystic

CVE-2024-56253WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerabilitySupsystic

CVE-2024-52434WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerabilitySupsystic

CVE-2024-5219Easy Google Maps <= 1.11.15 - Authenticated (Author+) Stored Cross-Site Scriptingsupsysticcom Easy Google Maps

CVE-2024-48046WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerabilitySupsystic

CVE-2024-48042WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerabilitySupsystic

CVE-2024-47330Broken Access Control vulnerability on multiple WordPress plugins by SupsysticSupsystic

CVE-2024-33910WordPress Digital Publications by Supsystic plugin <= 1.7.7 - Broken Access Control vulnerabilitySupsystic

CVE-2024-32829WordPress Data Tables Generator by Supsystic plugin <= 1.10.31 - Broken Access Control vulnerabilitySupsystic

CVE-2024-32790WordPress Pricing Table by Supsystic plugin <= 1.9.12 - Content Injection vulnerabilitySupsystic

CVE-2024-32089WordPress Digital Publications by Supsystic plugin <= 1.7.7 - Cross Site Request Forgery (CSRF) vulnerabilitySupsystic

CVE-2024-31421WordPress Popup by Supsystic plugin <= 1.10.27 - Broken Access Control vulnerabilitySupsystic

CVE-2024-31271WordPress Ultimate Maps plugin <= 1.2.16 - Cross Site Request Forgery vulnerabilitySupsystic

CVE-2024-31269WordPress Easy Google Maps plugin <= 1.11.11 - Cross Site Request Forgery (CSRF) vulnerabilitySupsystic Easy Google Maps

CVE-2024-30448WordPress Slider by Supsystic plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerabilitySupsystic

CVE-2024-30237WordPress Slider by Supsystic plugin <= 1.8.10 - SQL Injection vulnerabilitySupsystic

CVE-2024-29921WordPress Photo Gallery by Supsystic plugin <= 1.15.16 - Cross Site Scripting (XSS) vulnerabilitySupsystic

CVE-2024-13452Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX…supsysticcom Contact Form by Supsystic

CVE-2023-5756Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX actionsupsysticcom WordPress Flipbook by Supsystic

CVE-2023-51353WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerabilitySupsystic

CVE-2023-49191WordPress GDPR Cookie Consent by Supsystic Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)Supsystic

CVE-2023-46197WordPress Popup by Supsystic plugin <= 1.10.19 - Unauthenticated Subscriber Email Addresses Disclosuresupsystic.com Popup by Supsystic

CVE-2023-45068WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)Supsystic

CVE-2023-39997WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerabilitysupsystic.com Popup by Supsystic

CVE-2023-33926WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF)Supsystic Easy Google Maps

CVE-2023-2528Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX actionsupsysticcom Contact Form by Supsystic

CVE-2023-2526Easy Google Maps <= 1.11.7 - Cross-Site Request Forgery via AJAX actionsupsysticcom Easy Google Maps

CVE-2023-25043WordPress Data Tables Generator by Supsystic Plugin <= 1.10.25 is vulnerable to Broken Access ControlSupsystic Data Tables Generator

CVE-2023-22714WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)Supsystic

CVE-2022-47155WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)Supsystic

CVE-2022-33960WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi)…Supsystic (WordPress plugin)

CVE-2022-27235WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilitiesSupsystic (WordPress plugin)

CVE-2021-36891WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings…Supsystic (WordPress plugin)

CVE-2021-36890WordPress Social Share Buttons by Supsystic plugin <= 2.2.2 - Cross-Site Request Forgery (CSRF) vulnerabilitysupsystic.com Social Share Buttons by Supsystic (WordPress…

CVE-2021-24276Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)Supsystic

CVE-2021-24275Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)Supsystic

CVE-2021-24274Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)Supsystic

CVE-2020-37246WordPress Plugin Supsystic Backup 2.3.9 Local File InclusionSupsystic Backup

CVE-2020-37245WordPress Plugin Supsystic Digital Publications 1.6.9 Path Traversal XSSSupsystic Digital Publications

CVE-2020-37244WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidxSupsystic Membership

CVE-2020-37243WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSSSupsystic Pricing Table

CVE-2020-37242WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidxSupsystic Ultimate Maps

CVE-2017-20065Supsystic Popup Plugin cross-site request forgerySupsystic Popup Plugin

60 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.