WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability

CVE-2024-53769

What is CVE-2024-53769?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Custom Post Type to Map Store plugin developed by Ludovic RIAUDEL. This flaw permits an attacker to induce users to perform unintended actions on their behalf, potentially leading to a Stored Cross-Site Scripting (XSS) scenario. The issue primarily affects versions from n/a up to 1.1.0, compromising the security integrity of web applications using this plugin. Remediation is crucial to prevent unauthorized data exposure and manipulation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References