Extensions for Leaflet Map

Extensions for Leaflet Map has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (100%).

Every one of the 5 issues recorded for Extensions for Leaflet Map has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (3) reported by zaim. Extensions for Leaflet Map is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

5

Get automatic notifications for all Extensions for Leaflet Map vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-57380

Extensions for Leaflet Map <= 5.1 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records
Plugin Profile
Latestv5.4

Extensions for Leaflet Map

hupe13

Author

hupe13

5.0(24)
100/100
Last Updated
2026-08-11 (1mo ago)
Active Installs
3,000+
Downloads
93,149
Requires WP
6.2+
Requires PHP
8.2+
Tested up to
WP 7.1
Created
2021-03-23 (6y ago)
Requires Plugins
leaflet-map

Extends the WordPress Plugin Leaflet Map with Leaflet Plugins and other functions. Functions Create an elevation chart profile of a track. There are also acceleration, slope, speed and tempo chart profiles. You can also place multiple tracks on one map. By default Leaflet Map uses tiles from openstreetmap.org or from the tile servers you configured. You can use more and switch between them. Many markers on a map become confusing. You can cluster and shape them. You can use Awesome markers. You can group the elements on the map by criteria and show/hide them. Create a “featured map”. Create an overview map with geo-locations provided in the pages and posts. Get a tooltip when hovering over an element. You can design a choropleth map. You can display the map in fullscreen mode. Reset the map. Gesture handling Manage your files for Leaflet Map. Help to migrate from WP GPX Maps. and more functions. Included Leaflet Plugins Leaflet Plugins leaflet-elevation: A Leaflet plugin that allows to add elevation profiles using d3js. Leaflet.GeometryUtil Leaflet.i18n: Internationalisation module for Leaflet plugins. leaflet-rotate: A Leaflet plugin that allows to add rotation functionality to map tiles Leaflet.AlmostOver: This plugin allows to detect mouse click and overing events on lines, with a tolerance distance. @tmcw/togeojson: Convert KML, GPX, and TCX to GeoJSON. D3: Data-Driven Documents Leaflet-providers: An extension that contains configurations for various tile providers. Leaflet.Control.Opacity: Makes multiple tile layers transparent. Leaflet.markercluster: Provides Beautiful Animated Marker Clustering functionality. Leaflet.MarkerCluster.PlacementStrategies: Styling Markerclusters. Leaflet.ExtraMarkers: Shameless copy of Awesome-Markers with more shapes and colors. Leaflet List Markers: A Leaflet Control for listing visible markers in the map. Leaflet.FeatureGroup.SubGroup: Grouping of Leaflet elements by options and features. Leaflet.Control.Layers.Tree: A Tree Layers Control for Leaflet. Leaflet Control Search: Search Markers/Features location by option or custom property. leaflet-choropleth: Choropleth plugin for Leaflet (color scale based on value). leaflet.zoomhome: Provides a zoom control with a “Home” button to reset the view. leaflet.fullscreen: Simple plugin for Leaflet that adds fullscreen button to your maps. Leaflet.GestureHandling: A Leaflet plugin that allows to prevent default map scroll/touch behaviours. turf: Advanced geospatial analysis for browsers and Node.js Included Font Font Awesome 6 Documentation Detailed documentation and examples in German and English. Thank you Many thanks to everyone who found errors and provided ideas for new functions.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C