Local File Inclusion Vulnerability in RealMag777 Google Map Targeting by RealMag777
CVE-2025-52732

8.8HIGH

Key Information:

Vendor

WordPress
Status
Google Map Targeting
Vendor
CVE Published:
14 August 2025

What is CVE-2025-52732?

The Google Map Targeting plugin by RealMag777 contains a vulnerability due to improper control of filenames in PHP's include/require statements. This flaw exposes the application to local file inclusion attacks, allowing unauthorized access to server files and data retrieval. The vulnerability affects versions up to and including 1.1.6, necessitating immediate attention to secure your web applications against potential exploits.

Affected Version(s)

Google Map Targeting <= 1.1.6

References

https://patchstack.com/database/wordpress/plugin/gmap-tar...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LVT-tholv2k (Patchstack Alliance)
.