CVE-2026-65564
Received Received - Intake

Unauthenticated Sensitive Data Exposure in MapPress Maps

Publication date: 2026-07-27

Last updated on: 2026-07-27

Assigner: Patchstack

Description
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-27
Last Modified
2026-07-27
Generated
2026-07-27
AI Q&A
2026-07-27
EPSS Evaluated
N/A
NVD
CVE-2026-65564
EUVD
EUVD-2026-49237

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
mappress maps to 2.97.6 (inc)
mappress mappress_google_maps_for_wordpress to 2.97.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-65564 is a vulnerability in the WordPress MapPress Maps plugin versions 2.97.6 and below. It allows unauthenticated attackers to access sensitive data that should be restricted. The issue has a low severity with a CVSS score of 5.3.

Detection Guidance

To detect this vulnerability, check the version of the MapPress Maps plugin installed on your WordPress site. If it is version 2.97.6 or below, the system is vulnerable. You can verify the plugin version via the WordPress admin panel under Plugins or by inspecting the plugin files directly.

Impact Analysis

This vulnerability could allow attackers to view sensitive information, which might be used to exploit other weaknesses in the system. It poses a risk to data confidentiality and could potentially lead to further security issues.

Compliance Impact

This vulnerability could potentially expose sensitive data, which may impact compliance with regulations like GDPR or HIPAA if the exposed data includes personally identifiable information or protected health information. Unauthorized access to such data could lead to violations of data protection requirements.

Mitigation Strategies

Immediately update the MapPress Maps plugin to version 2.97.7 or later. If auto-updates are enabled, ensure they are functioning properly. If manual updates are required, download the latest version from the official WordPress plugin repository and install it.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65564. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart