Medium · 4.3 CVE-2025-39517 EUVD-2025-11337GHSA-fc2r-93rp-39pp

WordPress Basic Interactive World Map plugin <= 2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Published Apr 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP Map Plugins Product: Basic Interactive World Map

Description

Cross-Site Request Forgery (CSRF) vulnerability in WP Map Plugins Basic Interactive World Map basic-interactive-world-map allows Cross Site Request Forgery.This issue affects Basic Interactive World Map: from n/a through <= 2.7.

Affected products

Vendor	Product	Affected	Fixed
WP Map Plugins	Basic Interactive World Map	≤ 2.7	—

References

https://patchstack.com/database/Wordpress/Plugin/basic-interactive-world-map/vulnerability/wordpress-basic-interactive-world-map-plugin-2-7-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve vdb-entry