Mappresspro Mappress Maps For Wordpress — known CVE vulnerabilities

Every CVE whose affected-product data names Mappresspro Mappress Maps For Wordpress, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-0420 — CVSS 5.4 (medium): The MapPress Maps for WordPress plugin before 2.88.15 does not sanitize and escape the map title when outputting it back in the admin…
• CVE-2024-0421 — CVSS 5.3 (medium): The MapPress Maps for WordPress plugin before 2.88.16 is affected by an IDOR as it does not ensure that posts to be retrieve via an AJAX…