Medium · 4.3 CVE-2024-31271 EUVD-2024-29167GHSA-597m-66xw-8h74

WordPress Ultimate Maps plugin <= 1.2.16 - Cross Site Request Forgery vulnerability

Published Apr 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: supsystic Product: Ultimate Maps by Supsystic

Description

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Ultimate Maps by Supsystic.This issue affects Ultimate Maps by Supsystic: from n/a through 1.2.16.

Affected products

Vendor	Product	Affected	Fixed
Supsystic	Ultimate Maps by Supsystic	≤ 1.2.16	—

References

https://patchstack.com/database/vulnerability/ultimate-maps-by-supsystic/wordpress-ultimate-maps-plugin-1-2-16-cross-site-request-forgery-vulnerability?_s_id=cve vdb-entry