The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.0.20. This makes it possible for authenticated attackers with contributor-level privileges or above, to add, update or delete map projects.
References
Link | Resource |
---|---|
https://imagemappro.com/change-log/ | Release Notes |
https://www.wordfence.com/threat-intel/vulnerabilities/id/7c632452-8b13-4f78-aa8a-3c92bef5907f?source=cve | Third Party Advisory |
Configurations
History
05 Nov 2024, 17:04
Type | Values Removed | Values Added |
---|---|---|
References | () https://imagemappro.com/change-log/ - Release Notes | |
References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/7c632452-8b13-4f78-aa8a-3c92bef5907f?source=cve - Third Party Advisory | |
CPE | cpe:2.3:a:webcraftplugins:image_map_pro:*:*:*:*:-:wordpress:*:* | |
First Time |
Webcraftplugins image Map Pro
Webcraftplugins |
28 Oct 2024, 13:58
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
25 Oct 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-25 18:15
Updated : 2024-11-05 17:04
NVD link : CVE-2024-9584
Mitre link : CVE-2024-9584
CVE.ORG link : CVE-2024-9584
JSON object : View
Products Affected
webcraftplugins
- image_map_pro
CWE
CWE-862
Missing Authorization