CVE-2025-24742: WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability
Published Jan 27, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in WPGMaps WP Go Maps wp-google-maps.This issue affects WP Go Maps: from n/a through <= 9.0.40.
Affected Software
4 affected components
WP Go Maps WP Go Maps<=9.0.40
WordPress WP Google Maps<=9.0.40
Codecabin Wp Go Maps Wordpress<9.0.41
Codecabin Wp Go Maps Wordpress<9.0.41
Remediation
Information
Update the WordPress WP Google Maps plugin to the latest available version (at least 9.0.41).
Event History
Jan 27, 2025
CVE Published
via MITRE·02:22 PM
Data Sourced
via MITRE·02:22 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-24742?
CVE-2025-24742 is classified as a Cross-Site Request Forgery (CSRF) vulnerability that could potentially allow unauthorized actions on behalf of users.
2
How do I fix CVE-2025-24742?
To fix CVE-2025-24742, it is recommended to update WP Go Maps to the latest version beyond 9.0.40.
3
What versions are affected by CVE-2025-24742?
CVE-2025-24742 affects all versions of WP Go Maps up to and including 9.0.40.
4
What type of attack does CVE-2025-24742 enable?
CVE-2025-24742 enables Cross-Site Request Forgery (CSRF) attacks, which can lead to unauthorized actions on the site.
5
Who can be impacted by CVE-2025-24742?
Users of WP Go Maps version 9.0.40 and earlier are at risk of being impacted by CVE-2025-24742.