WordPress plugin
MapPress – Free Map Plugin for Google Maps & OpenStreetMap security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 18 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium15
- Low0
All MapPress – Free Map Plugin for Google Maps & OpenStreetMap vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤2.97.3Update to 2.97.4 | CVE-2026-56011 | |
| High8.8 | Authenticated (Contributor+) SQL Injection via get_maps ≤2.85.4Update to 2.85.5 | CVE-2023-26015 | |
| High8.8 | Remote Code Execution via Improper Capability Checks in AJAX Calls ≤2.54.5Update to 2.54.6 | CVE-2020-12675 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤2.97.3Update to 2.97.4
- High8.8Authenticated (Contributor+) SQL Injection via get_maps
≤2.85.4Update to 2.85.5
- High8.8Remote Code Execution via Improper Capability Checks in AJAX Calls
≤2.54.5Update to 2.54.6
MapPress – Free Map Plugin for Google Maps & OpenStreetMap: common questions
Does MapPress – Free Map Plugin for Google Maps & OpenStreetMap have known vulnerabilities?
Yes. VulnCrest Radar lists 18 known vulnerabilities in MapPress – Free Map Plugin for Google Maps & OpenStreetMap: 3 high, 15 medium. None are known to affect version null.
How do I check which version of MapPress – Free Map Plugin for Google Maps & OpenStreetMap I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent MapPress – Free Map Plugin for Google Maps & OpenStreetMap vulnerability?
CVE-2026-118168, published Oct 30, 2026: MapPress Maps for WordPress <= 2.97.14 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any MapPress – Free Map Plugin for Google Maps & OpenStreetMap vulnerability listed in CISA KEV?
No. None of the known MapPress – Free Map Plugin for Google Maps & OpenStreetMap vulnerabilities is currently listed in the CISA KEV catalog.