MapPress Maps for WordPress vulnerabilities
We track 1 vulnerability in MapPress Maps for WordPress products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2022.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest MapPress Maps for WordPress vulnerabilities
- 7.2 High severity
MapPress Maps for WordPress: Unrestricted Upload of File with Dangerous Type
The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the "ajax_save" function. The file is written relative to the cu