CVE-2026-42734: WordPress Geo Mashup plugin <= 1.13.19 - Cross Site Scripting (XSS) vulnerability
Published May 27, 2026
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through <= 1.13.19.
Affected Software
1 affected component
Dylan Kuhn Geo Mashup<=1.13.19
Event History
May 27, 2026
CVE Published
via MITRE·09:49 AM
Data Sourced
via MITRE·09:49 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-42734?
CVE-2026-42734 has a severity rating of 7.1, indicating a high risk level.
2
What type of vulnerability is CVE-2026-42734?
CVE-2026-42734 is a Cross Site Scripting (XSS) vulnerability.
3
How does CVE-2026-42734 affect users?
CVE-2026-42734 allows for reflected XSS attacks which can compromise user sessions and lead to unauthorized actions.
4
How do I fix CVE-2026-42734?
To fix CVE-2026-42734, update the Geo Mashup plugin to version 1.13.20 or later.
5
Which software is impacted by CVE-2026-42734?
CVE-2026-42734 affects the Geo Mashup plugin for WordPress versions up to and including 1.13.19.