CSRF Vulnerability in WP Map Plugins Interactive US Map by WordPress
CVE-2025-32661

7.1HIGH

Key Information:

Vendor

WordPress
Status
Interactive Us Map
Vendor
CVE Published:
9 April 2025

What is CVE-2025-32661?

A CSRF vulnerability has been identified in the WP Map Plugins Interactive US Map, which can allow attackers to execute stored cross-site scripting (XSS) attacks. This security issue affects versions ranging from n/a to 2.7, enabling an attacker to potentially manipulate user actions without their consent, leading to the execution of malicious scripts. Website administrators are advised to take immediate action to mitigate this security risk.

Affected Version(s)

Interactive US Map <= 2.7

References

https://patchstack.com/database/wordpress/plugin/interact...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Xuan Chien (Patchstack Alliance)
.
CVE-2025-32661 : CSRF Vulnerability in WP Map Plugins Interactive US Map by WordPress