TI-2022-00457 Aliases CVE-2022-0537 GHSA-5w72-p3x5-c825

MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution

LOW 35CWE-434Published 2022-04-04 · Updated 2024-08-02

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-434.

Summary

The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the "ajax_save" function. The file is written relative to the current 's stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.

Why it matters now

EPSS 0.01507 74th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed MapPress Maps for WordPress (Unknown): 2.73.13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Unknown	MapPress Maps for WordPress	2.73.13 to before 2.73.13	2.73.13	Patch available	CNA

MapPress Maps for WordPress VendorUnknown Affected 2.73.13 to before 2.73.13 Fixed in 2.73.13 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:mappresspro:mappress::::::wordpress::*	before 2.73.13	Vulnerable	chrisvrichardson

cpe:2.3:a:mappresspro:mappress:*:*:*:*:*:wordpress:*:* Versions before 2.73.13 Vulnerable ·chrisvrichardson

Remediation

Fix · CNA MapPress Maps for WordPress (Unknown) Fixed in 2.73.13

Timeline

2026-10-02 Threatist record created from CVE-2022-0537
2026-10-03 Alias added: GHSA-5w72-p3x5-c825

References

Exploit 1

https://wpscan.com/vulnerability/abfbba70-5158-4990-98e5-f302361db367

TI-2025-01793 MapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSS CVSS 3.1MEDIUM 6.8
TI-2023-05979 MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 3.1MEDIUM 6.4
TI-2025-01894 MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS CVSS 3.1MEDIUM 4.8
TI-2024-07996 MapPress Maps for WordPress < 2.93 - Admin+ Stored XSS via Map Settings CVSS 3.1MEDIUM 4.8
TI-2023-11256 WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection CVSS 3.1CRITICAL 9.8
TI-2020-09728 The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not… CVSS 3.1HIGH 8.8

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences