Unknown Mappress vulnerabilities

• unknown mappress MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure CVE-2026-118168 5.3 MediumNovember 1, 2026
• chrisvrichardson mappress maps for wordpress WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability CVE-2026-65564 5.3 MediumJuly 27, 2026
• chrisvrichardson mappress maps for wordpress WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-56011 Public exploit 7.1 HighJune 26, 2026
• chrisvrichardson mappress maps for wordpress MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints CVE-2026-8839 5.3 MediumJune 6, 2026
• mappresspro mappress, unknown mappress maps for wordpress +1 more MapPress Maps for WordPress < 2.93 - Admin+ Stored XSS via Map Settings CVE-2024-8620 4.8 MediumMay 15, 2025
• mappresspro mappress, unknown mappress maps for wordpress +1 more MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS CVE-2025-2162 4.8 MediumApril 18, 2025
• mappresspro mappress, unknown mappress maps for wordpress +1 more MapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSS CVE-2025-2055 6.8 MediumApril 3, 2025
• chrisvrichardson mappress maps for wordpress, mappresspro mappress +1 more MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block CVE-2024-10715 6.4 MediumNovember 6, 2024
• mappresspro mappress maps, mappress maps for wordpress +1 more MapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSS CVE-2024-0420 5.4 MediumFebruary 12, 2024
• mappresspro mappress maps for wordpress MapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosure CVE-2024-0421 5.3 MediumFebruary 12, 2024
• chrisvrichardson mappress maps for wordpress, mappresspro mappress +1 more MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings CVE-2023-7225 6.4 MediumJanuary 30, 2024
• chrisvrichardson mappress maps for wordpress, mappresspro mappress +1 more MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6524 6.4 MediumJanuary 3, 2024
• chris richardson mappress maps for wordpress, mappresspro mappress +1 more WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection CVE-2023-26015 7.1 HighNovember 3, 2023
• chrisvrichardson mappress maps for wordpress, mappresspro mappress +1 more MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4840 6.4 MediumSeptember 12, 2023
• mappresspro mappress, unknown mappress maps for wordpress +1 more MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution CVE-2022-0537 7.2 HighApril 4, 2022
• mappresspro mappress, unknown mappress maps for wordpress +1 more MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting CVE-2022-0208 6.1 MediumFebruary 14, 2022