sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2022-0537 MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution

High 7.2 Published Updated

High-privileged users can bypass security settings to upload arbitrary PHP files, leading to remote code execution on the WordPress site.

Exploited in the wild
Not known
Login needed
An administrator
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2022-0537?

CVE-2022-0537 is a high-severity vulnerability in Unknown MapPress Maps for WordPress, published on 4 Apr 2022. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the "ajax_save" function. The file is written relative to the current 's stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.

Weakness: CWE-434

Which versions are affected by CVE-2022-0537?

It affects 1 product.

Products include Mappresspro Mappress.

How do I fix CVE-2022-0537?

No fix has been published for CVE-2022-0537 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-0537 being exploited?

There is no known exploitation of CVE-2022-0537 in the wild and no public exploit code.

Sources

Also known as GHSA-5w72-p3x5-c825.

Is CVE-2022-0537 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free