SecAlerts
s

supsystic

Security Risk Profile

47
/100
medium

Security Risk Score

Comprehensive risk assessment based on 77 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 14, 2019 to present

77
Total CVEs
38
Critical+High
1
Exploited
29
Unpatched

Threat Assessment

Avg CVSS
7
Base severity
Avg EPSS
2%
Exploit probability
Unpatched
29
Critical/High
Risk Level
47/100
medium
⚠️ 1 Active Exploits📈 7 in Last 30 Days

Severity Distribution

Critical
9
High
29
Medium
39
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
1
<5%
12

Age Distribution

Common Weaknesses (CWE)

1
XSS
28
2
CSRF
19
3
SQL Injection
6
4
Path Traversal
3
5
Code Injection
3

Most Affected Products

1. Supsystic Popup Wordpress10
2. Supsystic Easy Google Maps Wordpress6
3. Supsystic Contact Form by Supsystic5
4. Supsystic Social Share Buttons Wordpress5
5. Supsystic Popup by Supsystic4

Recent Vulnerabilities

See more →
CVE-2026-14877
CVSS 6.4medium

Data Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table 'id' HTML Attribute

Oct 10, 2026🔧 No Patch
CVE-2026-104023
CVSS 4.9medium

Smart Popup by Supsystic <= 1.13.2 - Authenticated (Administrator+) SQL Injection via 'sidx' Parameter

Oct 10, 2026🔧 No Patch
CVE-2026-96648
CVSS 6.4medium

Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action

Oct 10, 2026🔧 No Patch
CVE-2026-102397
CVSS 6.5medium

WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability

Sep 30, 2026🔧 No Patch
CVE-2026-102398
CVSS 7.1high

WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

Sep 30, 2026🔧 No Patch
CVE-2026-102399
CVSS 5.4medium

WordPress Photo Gallery by Supsystic plugin <= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability

Sep 30, 2026🔧 No Patch
CVE-2026-102396
CVSS 7.1high

WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

Sep 30, 2026🔧 No Patch
CVE-2026-83625
CVSS 7.2high

Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header

Sep 5, 2026🔧 No Patch
CVE-2026-85309
CVSS 5.3medium

WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerability

Sep 3, 2026🔧 No Patch
CVE-2026-73381
CVSS 9.1critical

WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability

Aug 18, 2026🔧 No Patch

Monitor supsystic in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.