CVE-2026-65564

WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.

We have discovered 21,607 live websites that are affected by CVE-2026-65564.

Run a Free Instant Scan



Affected Software

Product  MapPress Pro
Category Widgets
Vulnerable Domains21,607 live websites (100% of MapPress Pro install base)
Vulnerable Versions
  • from 0 through 2.97.6
Vulnerable Versions Count284 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere



Details

  • Published - Jul 27, 2026
  • Updated - Jul 27, 2026

Credits

  • Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-65564
United States5,909 websites


Germany3,278 websites
Japan1,850 websites
France1,471 websites
Italy1,375 websites
GB1,103 websites
Netherlands717 websites
Canada643 websites
Poland594 websites
Switzerland395 websites

Website Distribution by TLD

Number of websites using CVE-2026-65564
.com7,996 websites
.de2,338 websites
.org1,317 websites
.it1,052 websites
.fr796 websites
.nl676 websites
.co.uk625 websites
.net590 websites
.pl481 websites
.jp450 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-65564

Top websites that are affected by CVE-2026-65564. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.fr France**,***
*****************.org United States**,***
*******.dk Denmark**,***
*****************.org United States**,***
**********.com Switzerland***,***
**.**********.bg Bulgaria***,***
**********.com France***,***
******.ca Canada***,***
****.org United States***,***
************.de Germany***,***
See full domain list

FAQ

CVE-2026-65564 is Exposure of Sensitive System Information to an Unauthorized Control Sphere in MapPress Pro
A total of 21,607 websites have been identified as vulnerable to CVE-2026-65564, based on global website indexing conducted by WebTechSurvey.
The MapPress Pro is affected by the CVE-2026-65564 vulnerability.
MapPress Pro versions up to and including 2.97.6 are vulnerable to CVE-2026-65564.