cve.bz

CVE-2021-25011

5.7 mediumEPSS 0.4%

Medium (5.7) in wpgooglemap wp google map. EPSS 0.4% chance of exploitation in the next 30 days.

The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings.

Severity

CVSS 3.1

5.7 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
EPSS
0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWEs
CWE-352, CWE-862
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON