CVE-2020-12675

The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to…

published May 29, 2020

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template files, leading to Remote Code Execution. NOTE: this issue exists because of an incomplete fix for CVE-2020-12077.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02842 · 86.6th percentile
Published
2020-05-29T15:52Z
EPSS history
Timeline
  • 29 MAY 15:52Z
    The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to…
    cvelistv5