Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.
CVE-2026-39720 at the National Vulnerability Database