Access Control Flaw in Geo Mashup by Dylan Kuhn

CVE-2026-115954

What is CVE-2026-115954?

A missing authorization vulnerability has been identified in the Geo Mashup plugin by Dylan Kuhn. This vulnerability allows attackers to exploit improperly configured access controls, potentially leading to unauthorized access to sensitive information. Users of Geo Mashup versions up to 1.13.22 are particularly at risk, as the flaw could permit illicit access to restricted features. It's crucial for website owners to update their installations to maintain security and protect their data from exploit attempts.

References