RSS   Podatności dla 'Mappress'   RSS

2022-02-14
 
CVE-2022-0208

CWE-79
 
 
The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the "Bad mapid" error message, leading to a Reflected Cross-Site Scripting

 
2020-05-29
 
CVE-2020-12675

CWE-434
 
 
The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template files, leading to Remote Code Execution. NOTE: this issue exists because of an incomplete fix for CVE-2020-12077.

 
2020-04-23
 
CVE-2020-12077

CWE-434
 
 
The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capability checks), leading to remote code execution.

 

 >>> Vendor: Mappresspro 2 Produkty
Mappress
Mappress maps

Copyright 2024, cxsecurity.com

 

Back to Top