CVE-2024-11827General

LOWCVSS 6.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Out of the Block: OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ootb_query shortcode in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

5 mentions across 5 observed days
Momentum state: stable

What's happening

General: 4 classified signals
Disclosure: 1 classified signal
Peaked 4d ago at 1 mentions (2026-02-02); latest day: 1
5 total mentions across 5 days

Deep dive

Activity timeline5 mentions / 5d

Signal classification2 categories

General

480.0%

Disclosure

120.0%

Referenced assets1 URL

By indicator

https://ciberseguridadhoy.es/vulnerabilidad-en-out-of-the-block-openstreetmap-para-wordpress-cve-2024-11827/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost

Classification over time

Date	Total	Labels

2026-02-02	1	General1
2026-03-10	1	General1
2026-03-21	1	General1
2026-04-29	1	Disclosure1
2026-06-11	1	General1

Full discourse5 posts

Ciberseguridad Hoy@ciberseghoy122d
General
Vulnerabilidad en Out of the Block: OpenStreetMap para WordPress (CVE-2024-11827) https://ciberseguridadhoy.es/vulnerabilidad-en-out-of-the-block-openstreetmap-para-wordpress-cve-2024-11827/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost
Post summary
The text merely announces the discovery of CVE‑2024‑11827 related to Out of the Block: OpenStreetMap for WordPress without providing further technical or operational details.
0001037
237 followersView on X
Ciberseguridad Hoy@ciberseghoy165d
Disclosure
Vulnerabilidad en Out of the Block: OpenStreetMap para WordPress (CVE-2024-11827) https://ciberseguridadhoy.es/vulnerabilidad-en-out-of-the-block-openstreetmap-para-wordpress-cve-2024-11827/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost
Post summary
The text references a news article announcing CVE‑2024‑11827 in the WordPress plugin "Out of the Block" but provides no further details, exploits, or mitigation information.
0001035
238 followersView on X
Ciberseguridad Hoy@ciberseghoy215d
General
Vulnerabilidad en Out of the Block: OpenStreetMap para WordPress (CVE-2024-11827) https://ciberseguridadhoy.es/vulnerabilidad-en-out-of-the-block-openstreetmap-para-wordpress-cve-2024-11827/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost
Post summary
The content merely notes the existence of CVE‑2024‑11827 affecting the OpenStreetMap WordPress plugin, with a link to an article, but provides no additional details, PoC, exploit, or remediation information.
0001053
236 followersView on X
Ciberseguridad Hoy@ciberseghoy204d
General
Vulnerabilidad en Out of the Block: OpenStreetMap para WordPress (CVE-2024-11827) https://ciberseguridadhoy.es/vulnerabilidad-en-out-of-the-block-openstreetmap-para-wordpress-cve-2024-11827/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost
Post summary
The post references CVE-2024-11827 in the Out of the Block OpenStreetMap WordPress plugin but offers no additional technical, exploit, or mitigation information.
0000038
236 followersView on X
Ciberseguridad Hoy@ciberseghoy250d
General
Vulnerabilidad en Out of the Block: OpenStreetMap para WordPress (CVE-2024-11827) https://ciberseguridadhoy.es/vulnerabilidad-en-out-of-the-block-openstreetmap-para-wordpress-cve-2024-11827/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost
Post summary
The provided text only announces the existence of CVE-2024-11827 for Out of the Block: OpenStreetMap WordPress plugin, offering a link to an external article but no further details.
0000035
236 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2024-11827

Ciberseguridad Hoy@ciberseghoyGeneral

The text merely announces the discovery of CVE‑2024‑11827 related to Out of the Block: OpenStreetMap for WordPress without providing further technical or operational details.

Ciberseguridad Hoy@ciberseghoyDisclosure

The text references a news article announcing CVE‑2024‑11827 in the WordPress plugin "Out of the Block" but provides no further details, exploits, or mitigation information.

Ciberseguridad Hoy@ciberseghoyGeneral

The content merely notes the existence of CVE‑2024‑11827 affecting the OpenStreetMap WordPress plugin, with a link to an article, but provides no additional details, PoC, exploit, or remediation information.

Ciberseguridad Hoy@ciberseghoyGeneral

The post references CVE-2024-11827 in the Out of the Block OpenStreetMap WordPress plugin but offers no additional technical, exploit, or mitigation information.

Ciberseguridad Hoy@ciberseghoyGeneral

The provided text only announces the existence of CVE-2024-11827 for Out of the Block: OpenStreetMap WordPress plugin, offering a link to an external article but no further details.