CVE-2023-26015: Mappresspro Mappress

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Chris Richardson MapPress Maps for WordPress mappress-google-maps-for-wordpress allows SQL Injection.This issue affects MapPress Maps for WordPress: from n/a through 2.85.4.

Affected products

• Mappresspro Mappress: up to and including 2.85.4

Published 2023-11-03. Last modified 2026-06-17.