Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:mapster:wp_maps:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Arbitrary User Meta Write Vulnerability in Mapster WP Maps Plugin

The Mapster WP Maps WordPress plugin contains an arbitrary user meta write vulnerability via the my_profile_update() function, allowing authenticated users with Subscriber-level access to overwrite arbitrary user metadata.

WP Maps web-vulnerability wordpress arbitrary-meta-write
1t 1c