Skip to content
OpenAdvisories
High · 7.1 CVE-2023-26015 EUVD-2023-29902GHSA-3jqq-fq3v-jv64

WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection

Published Nov 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Chris Richardson MapPress Maps for WordPress mappress-google-maps-for-wordpress allows SQL Injection.This issue affects MapPress Maps for WordPress: from n/a through 2.85.4.

Affected products

VendorProductAffectedFixed
Chris Richardson MapPress Maps for WordPress ≤ 2.85.4 —

References