CVE-2025-39517
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 16, 2025
CWE ID 352
Summary
CVE-2025-39517 is a Cross-Site Request Forgery (CSRF) vulnerability affecting WP Map Plugins Basic Interactive World Map. The flaw permits an attacker to execute unintended actions on an affected user's web application by tricking them into making a request to a malicious website. This vulnerability can impact users running versions 1.0 through 2.7 of the plugin. Successful exploitation could lead to unauthorized modifications or data theft. Users are advised to install patches or update their plugin to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.