Non notée
CVE-2022-0537 The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and…
Description
The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the "ajax_save" function. The file is written relative to the current 's stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MapPress Maps for WordPress 2.73 | premières → < 2.73.13 | 2.73.13 |
Références
- wpscan.com wpscan.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de MapPress Maps for WordPress
Les 7 CVE de MapPress Maps for WordPress →
CVE-2024-8620
The MapPress Maps for WordPress plugin before 2.93 does not sanitise and escape some of its settings, which could…
4.8
Moyenne
CVE-2025-2162
The MapPress Maps for WordPress plugin before 2.94.10 does not sanitise and escape some of its settings, which could…
4.8
Moyenne
CVE-2025-2055
The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise and escape some parameters when outputing them in…
6.8
Moyenne
CVE-2024-0420
The MapPress Maps for WordPress plugin before 2.88.15 does not sanitize and escape the map title when outputting it back…
6.1
Moyenne