Beta

Report

Image Map Pro <= 6.0.20 is vulnerable to Missing Authorization to Authenticated (Contributor+) Map Project Add/Update/Delete vulnerability

Contributor
Published
2024-10-24

The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.0.20. This makes it possible for authenticated attackers with contributor-level privileges or above, to add, update or delete map projects.

CVSS

Score:5.4

Severity:Medium

Version: 6.0.20

There is a patch available in v6.0.21 and we strongly recommend you update to this version as soon as possible.