Mappress Maps For Wordpress (Unknown) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-05-15. Vendor: Unknown.

CVEs of Mappress Maps For Wordpress

• CVE-2024-8620 - CVSS 4.8 (medium), 2025-05-15: The MapPress Maps for WordPress plugin before 2.93 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2025-2162 - CVSS 4.8 (medium), 2025-04-18: The MapPress Maps for WordPress plugin before 2.94.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
• CVE-2025-2055 - CVSS 6.8 (medium), 2025-04-03: The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise and escape some parameters when outputing them in the page, which could allow users…
• CVE-2024-0420 - CVSS 6.1 (medium), 2024-02-12: The MapPress Maps for WordPress plugin before 2.88.15 does not sanitize and escape the map title when outputting it back in the admin dashboard, allowing…
• CVE-2024-0421 - CVSS 5.3 (medium), 2024-02-12: The MapPress Maps for WordPress plugin before 2.88.16 is affected by an IDOR as it does not ensure that posts to be retrieve via an AJAX action is a public…
• CVE-2022-0537 - CVSS 7.2 (high), 2022-04-04: The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and…
• CVE-2022-0208 - CVSS 6.1 (medium), 2022-02-14: The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the "Bad mapid" error…