Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MapPress Maps for WordPress — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in MapPress Maps for WordPress, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities for MapPress Maps for WordPress, a third-party mapping plugin for the WordPress content management system. The collection focuses on common weakness types such as SQL Injection, Cross-Site Scripting, and Cross-Site Request Forgery within this specific product. It covers advisories released over the past five years, providing a consolidated view of historical and recent security issues affecting users of this plugin. Readers can track the vendor’s published advisories, analyze specific weakness classes, and review the complete vulnerability history of the product to assess its overall security posture.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-65564 WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability CWE-497 5.3 Medium 2026-07-27
CVE-2026-56011 WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-26
CVE-2026-8839 MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints CWE-639 5.3 Medium 2026-06-06
CVE-2024-8620 MapPress Maps for WordPress < 2.93 - Admin+ Stored XSS via Map Settings 4.8AI Medium AI 2025-05-15
CVE-2025-2162 MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS 4.8 - 2025-04-18
CVE-2025-2055 MapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSS 5.4AI Medium AI 2025-04-03
CVE-2024-10715 MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block CWE-79 6.4 Medium 2024-11-06
CVE-2024-0420 MapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSS 5.4 - 2024-02-12
CVE-2024-0421 MapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosure 5.3 - 2024-02-12
CVE-2023-7225 MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings CWE-79 6.4 Medium 2024-01-30
CVE-2023-6524 MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-01-03
CVE-2023-26015 WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection CWE-89 7.1 High 2023-11-03
CVE-2023-4840 MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium 2023-09-12
CVE-2022-0537 MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution CWE-434 7.2 - 2022-04-04
CVE-2022-0208 MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting CWE-79 6.1 - 2022-02-14

All 15 known CVE vulnerabilities affecting MapPress Maps for WordPress with full Chinese analysis, references, and POCs where available.