CVE-2022-0208: Mappresspro Mappress

Medium severity, CVSS 6.1. EPSS: 2% chance of exploitation in the next 30 days.

The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the "Bad mapid" error message, leading to a Reflected Cross-Site Scripting

Affected products

• Mappresspro Mappress: before 2.73.4 (fixed in 2.73.4)

Published 2022-02-14. Last modified 2026-06-17.