What’s Vulnerable › Products

MapPress Maps for WordPress vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your MapPress Maps for WordPress version is affected

Latest MapPress Maps for WordPress vulnerabilities

• CVE-2026-65564 — WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2026-56011 — WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-8839 — MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints (CVSS 5.3)
• CVE-2024-8620 — MapPress Maps for WordPress < 2.93 - Admin+ Stored XSS via Map Settings (CVSS 4.8)
• CVE-2025-2162 — MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2025-2055 — MapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSS (CVSS 6.8)
• CVE-2024-10715 — MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block (CVSS 5.4)
• CVE-2023-7225 — MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings (CVSS 5.4)
• CVE-2023-6524 — MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2023-26015 — WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection (CVSS 9.8)
• CVE-2023-4840 — MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2022-0537 — MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution (CVSS 7.2)
• CVE-2022-0208 — MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting (CVSS 6.1)
• CVE-2020-12675 — (CVSS 8.8)
• CVE-2020-12077 — (CVSS 8.8)