CVE-2025-32138
CVSS 3.1 Score 6.6 of 10 (medium)
Details
Published Apr 4, 2025
Updated: Apr 7, 2025
CWE ID 611
Summary
CVE-2025-32138 is a vulnerability affecting the supsystic Easy Google Maps plugin. This issue involves an Improper Restriction of XML External Entity Reference, enabling XML Injection. Attackers can exploit this vulnerability to execute arbitrary code, posing a significant security risk. The impacted versions of the plugin are from n/a up to and including 1.11.17. Users are strongly advised to update to a secure version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.