MapPress – Google Maps, OpenStreetMap & Leaflet

Уязвимости

• CVE-2023-26015нужен вход≤ 2.85.4

  WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection

  Критич. 9.8

• CVE-2020-12675нужен вход

  The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions

  Высокий 8.8

• CVE-2020-12077нужен вход

  The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capabi

  Высокий 8.8

• CVE-2026-56011без авторизации · нужен клик≤ 2.97.3

  WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2024-10715участник+≤ 2.94.1

  MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block

  Средний 5.4

• CVE-2023-7225участник+≤ 2.88.16

  MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings

  Средний 5.4

• CVE-2023-6524участник+≤ 2.88.13

  MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2023-4840участник+≤ 2.88.4

  MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 5.4

• CVE-2026-65564без авторизации≤ 2.97.6

  WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability

  Средний 5.3

• CVE-2026-8839без авторизации≤ 2.96.6

  MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints

  Средний 5.3