mappresspro records

14 published records for vendor mappresspro.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 42.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-26015No exploit	WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injectionmappresspro · mappress · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.7%	Nov 3, 2023
37Monitor	CVE-2020-12077Proof of concept	The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capabimappresspro · mappress · CWE-434 RCE File upload	High8.8	—	5.5%	Apr 22, 2020
36Monitor	CVE-2020-12675No exploit	The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions mappresspro · mappress · CWE-434 RCE File upload	High8.8	—	2.8%	May 29, 2020
28Monitor	CVE-2022-0537No exploit	MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Executionmappresspro · mappress · CWE-434 RCE File upload	High7.2	—	1.5%	Apr 4, 2022
27Monitor	CVE-2025-2055No exploit	MapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSSmappresspro · mappress · CWE-79 XSS	Medium6.8	—	0.5%	Apr 3, 2025
25Monitor	CVE-2022-0208Proof of concept	MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scriptingmappresspro · mappress · CWE-79 Pre-auth XSS	Medium6.1	—	2.0%	Feb 14, 2022
21Monitor	CVE-2024-0421No exploit	MapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosuremappresspro · mappress maps for wordpress · CWE-639 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.6%	Feb 12, 2024
21Monitor	CVE-2023-4840No exploit	MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodemappresspro · mappress · CWE-79 XSS	Medium5.4	—	0.6%	Sep 11, 2023
21Monitor	CVE-2023-6524No exploit	MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scriptingmappresspro · mappress · CWE-79 XSS	Medium5.4	—	0.5%	Jan 3, 2024
21Monitor	CVE-2023-7225No exploit	MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settingsmappresspro · mappress · CWE-79 XSS	Medium5.4	—	0.5%	Jan 30, 2024
21Monitor	CVE-2024-0420No exploit	MapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSSmappresspro · mappress maps for wordpress · CWE-79 XSS	Medium5.4	—	0.5%	Feb 12, 2024
21Monitor	CVE-2024-10715No exploit	MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Blockmappresspro · mappress · CWE-79 XSS	Medium5.4	—	0.3%	Nov 6, 2024
19Monitor	CVE-2025-2162No exploit	MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSSmappresspro · mappress · CWE-79 XSS	Medium4.8	—	0.4%	Apr 18, 2025
19Monitor	CVE-2024-8620No exploit	MapPress Maps for WordPress < 2.93 - Admin+ Stored XSS via Map Settingsmappresspro · mappress · CWE-79 XSS	Medium4.8	—	0.3%	May 15, 2025

CVE-2023-26015
39Monitor
WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
mappresspro · mappressNov 3, 2023
CVE-2020-12077
37Monitor
The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capabi
HighCVSS 8.8Proof of conceptEPSS 6%
- RCE
- File upload
mappresspro · mappressApr 22, 2020
CVE-2020-12675
36Monitor
The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions
HighCVSS 8.8No exploitEPSS 3%
- RCE
- File upload
mappresspro · mappressMay 29, 2020
CVE-2022-0537
28Monitor
MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution
HighCVSS 7.2No exploitEPSS 2%
- RCE
- File upload
mappresspro · mappressApr 4, 2022
CVE-2025-2055
27Monitor
MapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSS
MediumCVSS 6.8No exploitEPSS 0%
- XSS
mappresspro · mappressApr 3, 2025
CVE-2022-0208
25Monitor
MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting
MediumCVSS 6.1Proof of conceptEPSS 2%
- Pre-auth
- XSS
mappresspro · mappressFeb 14, 2022
CVE-2024-0421
21Monitor
MapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosure
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
mappresspro · mappress maps for wordpressFeb 12, 2024
CVE-2023-4840
21Monitor
MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 1%
- XSS
mappresspro · mappressSep 11, 2023
CVE-2023-6524
21Monitor
MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 1%
- XSS
mappresspro · mappressJan 3, 2024
CVE-2023-7225
21Monitor
MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings
MediumCVSS 5.4No exploitEPSS 0%
- XSS
mappresspro · mappressJan 30, 2024
CVE-2024-0420
21Monitor
MapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 0%
- XSS
mappresspro · mappress maps for wordpressFeb 12, 2024
CVE-2024-10715
21Monitor
MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block
MediumCVSS 5.4No exploitEPSS 0%
- XSS
mappresspro · mappressNov 6, 2024
CVE-2025-2162
19Monitor
MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%
- XSS
mappresspro · mappressApr 18, 2025
CVE-2024-8620
19Monitor
MapPress Maps for WordPress < 2.93 - Admin+ Stored XSS via Map Settings
MediumCVSS 4.8No exploitEPSS 0%
- XSS
mappresspro · mappressMay 15, 2025