CVE-2026-66450

HighCVSS 8.1

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Unauthenticated Local File Inclusion vulnerability in Geo Mashup versions up to 1.13.18.

An attacker may read local files on the server, potentially exposing sensitive data such as configuration files or user data.

Update the plugin to the latest version that addresses this vulnerability.

Original NVD description (English source)

Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.