Skip to content
Threat Feed
Subscribe

Product

WP Maps (<= 1.23.0)

1 brief RSS
high advisory

Arbitrary User Meta Write Vulnerability in Mapster WP Maps Plugin

The Mapster WP Maps WordPress plugin contains an arbitrary user meta write vulnerability via the my_profile_update() function, allowing authenticated users with Subscriber-level access to overwrite arbitrary user metadata.

WP Maps web-vulnerability wordpress arbitrary-meta-write
1t 1c