Lucene search
MitreCVELIST:CVE-2020-12675HistoryMay 29, 2020 - 3:52 p.m.
CVE-2020-12675
2020-05-2915:52:06
mitre
www.cve.org
The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template files, leading to Remote Code Execution. NOTE: this issue exists because of an incomplete fix for CVE-2020-12077.
Related
nvd
nvd
CVE-2020-12675
2020-05-29 16:15:10
CVE-2020-12077
2020-04-23 03:15:10
cve
cve
CVE-2020-12675
2020-05-29 16:15:10
CVE-2020-12077
2020-04-23 03:15:10
prion
prion
Design/Logic Flaw
2020-05-29 16:15:00
Remote code execution
2020-04-23 03:15:00
wpvulndb
wpvulndb
MapPress Maps < 2.53.9 - Authenticated Map Creation/Deletion Leading to Stored Cross-Site Scripting (XSS)
2020-04-23 00:00:00
MapPress Maps Pro < 2.53.9 - Remote Code Execution (RCE) due to Incorrect Access Control in AJAX Actions
2020-04-23 00:00:00
MapPress Maps < 2.54.6 - Improper Capability Checks in AJAX Calls
2020-05-28 00:00:00
openvas
openvas
WordPress MapPress Plugin < 2.53.9 Multiple Vulnerabilities
2020-04-28 00:00:00
WordPress MapPress Plugin < 2.54.6 RCE Vulnerability
2020-06-03 00:00:00
cvelist
cvelist
CVE-2020-12077
2020-04-23 02:20:46
wpexploit
wpexploit