Basic Google Maps Placemarks WordPress Plugin Authorization Bypass Vulnerability

A vulnerability exists in the Basic Google Maps Placemarks plugin for WordPress, in versions through 1.10.7, allowing authorization bypass. The plugin fails to properly verify user authorization for certain actions, enabling unauthenticated attackers to alter stored map coordinates (latitude and longitude).

Impact

Exploitation of this vulnerability allows for unauthorized modification of map coordinates, potentially leading to incorrect information being displayed or used within the application.

Remediation

Users are advised to update the Basic Google Maps Placemarks WordPress plugin to version 1.10.8 or a newer patched version.