Mappresspro vulnerabilities
We track 2 vulnerabilities in Mappresspro products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2023.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Mappresspro vulnerabilities
- 9.8 Critical severity
MapPress Maps for WordPress: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Chris Richardson MapPress Maps for WordPress mappress-google-maps-for-wordpress allows SQL Injection.This issue affects MapPress Maps for WordPress: from n/a
- 7.2 High severity
MapPress Maps for WordPress: Unrestricted Upload of File with Dangerous Type
The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the "ajax_save" function. The file is written relative to the cu