CVE-2022-0537

CVE-2022-0537 is a critical arbitrary file upload vulnerability affecting the MapPress Maps for WordPress plugin prior to version 2.73.13. A high-privileged attacker can bypass security settings (DISALLOW_FILE_EDIT, DISALLOW_FILE_MODS) to upload malicious files, including web shells, leading to Remote Code Execution (RCE). This vulnerability has a CVSS score of 7.2 (HIGH) due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.