VULNERABILITY INTELLIGENCE

CVE-2024-0421

CVSS score5.3 MEDIUM

EPSS probability0.61%

CISA KEVNot currently listed

Published2024-02-12

Last modified2026-06-17

Description

The MapPress Maps for WordPress plugin before 2.88.16 is affected by an IDOR as it does not ensure that posts to be retrieve via an AJAX action is a public map, allowing unauthenticated users to read arbitrary private and draft posts.