CVE-2018-14071: Cyberhobo Geo Mashup

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.

Affected products

• Cyberhobo Geo Mashup: before 1.10.4 (fixed in 1.10.4)

Published 2018-07-16. Last modified 2026-06-17.