CVE-2021-25011

The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings.

CVSS v3 5.7 MEDIUM
CVSS v2.0 3.5 LOW

5.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://plugins.trac.wordpress.org/changeset/2641450	Release Notes Third Party Advisory
https://wpscan.com/vulnerability/6639da0d-6d29-46c1-a3cc-5e5626305833	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:wpgooglemap:wp_google_map:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2022-02-28 09:15

Updated : 2024-02-28 19:09

NVD link : CVE-2021-25011

Mitre link : CVE-2021-25011

CVE.ORG link : CVE-2021-25011

JSON object : View

Products Affected

wpgooglemap

wp_google_map

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

CWE-862

Missing Authorization

{"id": "CVE-2021-25011", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.1}]}, "published": "2022-02-28T09:15:08.487", "references": [{"url": "https://plugins.trac.wordpress.org/changeset/2641450", "tags": ["Release Notes", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/6639da0d-6d29-46c1-a3cc-5e5626305833", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}, {"type": "Secondary", "source": "contact@wpscan.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings."}, {"lang": "es", "value": "El plugin Maps usando Google Maps para WordPress versiones anteriores a 1.8.1, no presenta una autorizaci\u00f3n adecuada y CSRF en la mayor\u00eda de sus acciones AJAX, lo que podr\u00eda permitir a cualquier usuario autenticado, como el suscriptor, eliminar entradas arbitrarias y actualizar la configuraci\u00f3n del plugin."}], "lastModified": "2022-10-25T16:41:57.217", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wpgooglemap:wp_google_map:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "D181E200-DCF1-4255-9B8C-DB07C8BCB26A", "versionEndExcluding": "1.8.1"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}