CVE-2026-66445

WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions.

We have discovered 932 live websites that are affected by CVE-2026-66445.

Run a Free Instant Scan



Affected Software

Product  Open User Map
Category Wordpress Plugins
Vulnerable Domains932 live websites (100% of Open User Map install base)
Vulnerable Versions
  • from 0 through 1.4.46
Vulnerable Versions Count46 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Jul 27, 2026
  • Updated - Jul 27, 2026

Credits

  • TurboNexic | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-66445
United States205 websites


Germany203 websites
France67 websites
Italy52 websites
GB52 websites
Austria34 websites
Poland28 websites
Spain25 websites
Denmark22 websites
Switzerland21 websites

Website Distribution by TLD

Number of websites using CVE-2026-66445
.com315 websites
.de154 websites
.it41 websites
.org40 websites
.at37 websites
.co.uk31 websites
.fr26 websites
.ch18 websites
.pl16 websites
.net14 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-66445

Top websites that are affected by CVE-2026-66445. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***********.com United States***,***
****.mobi France***,***
***************.org Indonesia***,***
**********.org France***,***
***.coop France***,***
*********.vc Singapore***,***
****.de Germany***,***
**************.it Italy***,***
*****.org Switzerland*,***,***
**************.com United States*,***,***
See full domain list

FAQ

CVE-2026-66445 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Open User Map
A total of 932 websites have been identified as vulnerable to CVE-2026-66445, based on global website indexing conducted by WebTechSurvey.
The Open User Map is affected by the CVE-2026-66445 vulnerability.
Open User Map versions up to and including 1.4.46 are vulnerable to CVE-2026-66445.