VULNERABILITY INTELLIGENCE

CVE-2021-25011

CVSS score5.7 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2022-02-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Description

The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings.

Weakness classification

  • contact@wpscan.com: CWE-862
  • nvd@nist.gov: CWE-352

Primary references