ShMapper by Teplitsa

ShMapper by Teplitsa has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for ShMapper by Teplitsa has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. ShMapper by Teplitsa is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ShMapper by Teplitsa vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-12518

shMapper by Teplitsa <= 1.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-01-24 00:00	ShMapper by Teplitsa <= 1.5.0 - Authenticated (Editor+) Stored Cross-Site Scripting ShMapper by Teplitsa <= 1.5.0	`CVE-2025-24674`	4.4 Medium	Khang Duong	Yes
2024-12-23 00:00	shMapper by Teplitsa <= 1.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting ShMapper by Teplitsa <= 1.4.18	`CVE-2024-12518`	6.4 Medium	Peter Thaleikis	Yes

Showing 1–2 of 2 reports

Latestv1.5.1

ShMapper by Teplitsa

Author

Denis Cherniatev

5.0(5)

100/100

Last Updated

2025-01-14 (2y ago)

Active Installs

100+

Downloads

8,110

Requires WP

5.0+

Requires PHP

7.4+

Tested up to

WP 6.7.7

Created

2019-05-16 (7y ago)

The shMapper plugin allows you to create simple crowdsourcing maps on OpenStreetMap with an option of feedback messages form. This plugin gives you an alternative to current online map services such as Yandex.Maps, Google Maps etc which don’t provide the option for users to add new objects. Most of the code written by Gennadiy Glazunov aka Genagl Core features Configure and display maps with markers on pages. Display maps using shortcodes. Receive new map markers via feedback form. Pre or post-moderation of new markers. reCaptcha form protection. Custom markers icons. PHP at least 5.6 is required for plugin to work correctly. Help the project We will be very grateful if you will help us to make ShMapper better. You can add a bugreport or a feature request on GitHub. Send us your pull request to share a code impovement. You can make a new plugin translation for your language or send us a fixes for an existing translation, if needed. If you have a questions for the plugin work in any aspect, please address our support service on GitHub.

View on WordPress.org