CVE-2012-10018

ALTO 8.3CVE-2012-10018 · Published 16/10/2024 · updated 16/06/2026

In breve

CVE-2012-10018 è una vulnerabilità ALTO (CVSS 8.3) che riguarda mapplic (mapplic).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mapplic mapplic	`≤ 1.0≤ 6.1`	No fix yet

Description

The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and including 6.1, 1.0 respectively. This makes it possible for attackers to forgery requests coming from a vulnerable site's server and ultimately perform an XSS attack if requesting an SVG file.

References

packetstormsecurity.com/files/161919 · Exploit
packetstormsecurity.com/files/161920 · Exploit
plugins.trac.wordpress.org/changeset/2503447 · Patch
mapplic.com/docs · Release Notes
wordfence.com/threat-intel/vulnerabilities/id/5aacabb5-94af-485a-af24-e84db3e3726f · Third Party Advisory

Altre vulnerabilità di mapplic

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free