CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in WP Map Plugins Basic Interactive World Map basic-interactive-world-map allows Cross Site Request Forgery.This issue affects Basic Interactive World Map: from n/a through <= 2.7.
Explanation of Vulnerability in Simple Terms
The Basic Interactive World Map plugin for WordPress contains a cross-site request forgery (CSRF) vulnerability in versions 2.7 and earlier. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the map plugin without the admin's knowledge or consent. The vulnerability requires user interaction but does not require authentication to set up the attack.
What an attacker can do
Trick a logged-in admin into performing unwanted actions on the map plugin via a malicious webpage.
Potential impact on your site
Attackers can modify map settings or data if they trick your admin into visiting a malicious link.
Conditions required to exploit
Admin must visit attacker-controlled webpage while logged into WordPress.
Key dates
External resources
