Mappress vulnerabilities

2 known vulnerabilities in Mappress from Mappresspro. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  MapPress Maps for WordPress: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-26015Nov 3, 2023Chris Richardson

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Chris Richardson MapPress Maps for WordPress mappress-google-maps-for-wordpress allows SQL Injection.This issue affects MapPress Maps for WordPress: from n/a

• 7.2 High severity

  MapPress Maps for WordPress: Unrestricted Upload of File with Dangerous Type

  CVE-2022-0537Apr 4, 2022MapPress Maps for WordPressEPSS 1.51%

  The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the "ajax_save" function. The file is written relative to the cu