Vulnerabilities > CVE-2024-0421 - Authorization Bypass Through User-Controlled Key vulnerability in Mappresspro Mappress Maps for Wordpress

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

mappresspro

CWE-639

NVD

Published: 2024-02-12

Updated: 2024-10-04

Summary

The MapPress Maps for WordPress plugin before 2.88.16 is affected by an IDOR as it does not ensure that posts to be retrieve via an AJAX action is a public map, allowing unauthenticated users to read arbitrary private and draft posts.

Vulnerable Configurations

Part	Description	Count
Application	Mappresspro Mappresspro Mappress Maps FOR Wordpress 2.70 Mappresspro Mappress Maps FOR Wordpress 2.70.1 Mappresspro Mappress Maps FOR Wordpress 2.71 Mappresspro Mappress Maps FOR Wordpress 2.71.1 Mappresspro Mappress Maps FOR Wordpress 2.72 Mappresspro Mappress Maps FOR Wordpress 2.72.1 Mappresspro Mappress Maps FOR Wordpress 2.72.2 Mappresspro Mappress Maps FOR Wordpress 2.72.3 Mappresspro Mappress Maps FOR Wordpress 2.72.4 Mappresspro Mappress Maps FOR Wordpress 2.72.5 Mappresspro Mappress Maps FOR Wordpress 2.73 Mappresspro Mappress Maps FOR Wordpress 2.73.1 Mappresspro Mappress Maps FOR Wordpress 2.73.2 Mappresspro Mappress Maps FOR Wordpress 2.73.3 Mappresspro Mappress Maps FOR Wordpress 2.73.4 Mappresspro Mappress Maps FOR Wordpress 2.73.5 Mappresspro Mappress Maps FOR Wordpress 2.73.6 Mappresspro Mappress Maps FOR Wordpress 2.73.7 Mappresspro Mappress Maps FOR Wordpress 2.73.8 Mappresspro Mappress Maps FOR Wordpress 2.73.9 Mappresspro Mappress Maps FOR Wordpress 2.73.10 Mappresspro Mappress Maps FOR Wordpress 2.73.11 Mappresspro Mappress Maps FOR Wordpress 2.73.12 Mappresspro Mappress Maps FOR Wordpress 2.73.13 Mappresspro Mappress Maps FOR Wordpress 2.73.14 Mappresspro Mappress Maps FOR Wordpress 2.73.15 Mappresspro Mappress Maps FOR Wordpress 2.73.16 Mappresspro Mappress Maps FOR Wordpress 2.73.17 Mappresspro Mappress Maps FOR Wordpress 2.73.18 Mappresspro Mappress Maps FOR Wordpress 2.74 Mappresspro Mappress Maps FOR Wordpress 2.74.1 Mappresspro Mappress Maps FOR Wordpress 2.74.2 Mappresspro Mappress Maps FOR Wordpress 2.74.3 Mappresspro Mappress Maps FOR Wordpress 2.75 Mappresspro Mappress Maps FOR Wordpress 2.75.1 Mappresspro Mappress Maps FOR Wordpress 2.75.2 Mappresspro Mappress Maps FOR Wordpress 2.75.3 Mappresspro Mappress Maps FOR Wordpress 2.75.4 Mappresspro Mappress Maps FOR Wordpress 2.75.5 Mappresspro Mappress Maps FOR Wordpress 2.75.6 Mappresspro Mappress Maps FOR Wordpress 2.76 Mappresspro Mappress Maps FOR Wordpress 2.76.1 Mappresspro Mappress Maps FOR Wordpress 2.76.2 Mappresspro Mappress Maps FOR Wordpress 2.76.3 Mappresspro Mappress Maps FOR Wordpress 2.76.4 Mappresspro Mappress Maps FOR Wordpress 2.76.5 Mappresspro Mappress Maps FOR Wordpress 2.76.6 Mappresspro Mappress Maps FOR Wordpress 2.77 Mappresspro Mappress Maps FOR Wordpress 2.77.1 Mappresspro Mappress Maps FOR Wordpress 2.77.2 Mappresspro Mappress Maps FOR Wordpress 2.77.3 Mappresspro Mappress Maps FOR Wordpress 2.80 Mappresspro Mappress Maps FOR Wordpress 2.80.1 Mappresspro Mappress Maps FOR Wordpress 2.80.2 Mappresspro Mappress Maps FOR Wordpress 2.80.3 Mappresspro Mappress Maps FOR Wordpress 2.80.4 Mappresspro Mappress Maps FOR Wordpress 2.80.5 Mappresspro Mappress Maps FOR Wordpress 2.80.6 Mappresspro Mappress Maps FOR Wordpress 2.80.7 Mappresspro Mappress Maps FOR Wordpress 2.80.8 Mappresspro Mappress Maps FOR Wordpress 2.80.9 Mappresspro Mappress Maps FOR Wordpress 2.80.10 Mappresspro Mappress Maps FOR Wordpress 2.80.11 Mappresspro Mappress Maps FOR Wordpress 2.81 Mappresspro Mappress Maps FOR Wordpress 2.81.1 Mappresspro Mappress Maps FOR Wordpress 2.81.2 Mappresspro Mappress Maps FOR Wordpress 2.82 Mappresspro Mappress Maps FOR Wordpress 2.82.1 Mappresspro Mappress Maps FOR Wordpress 2.82.2 Mappresspro Mappress Maps FOR Wordpress 2.82.3 Mappresspro Mappress Maps FOR Wordpress 2.82.4 Mappresspro Mappress Maps FOR Wordpress 2.83 Mappresspro Mappress Maps FOR Wordpress 2.83.1 Mappresspro Mappress Maps FOR Wordpress 2.83.2 Mappresspro Mappress Maps FOR Wordpress 2.83.3 Mappresspro Mappress Maps FOR Wordpress 2.83.4 Mappresspro Mappress Maps FOR Wordpress 2.83.5 Mappresspro Mappress Maps FOR Wordpress 2.83.6 Mappresspro Mappress Maps FOR Wordpress 2.83.7 Mappresspro Mappress Maps FOR Wordpress 2.83.8 Mappresspro Mappress Maps FOR Wordpress 2.83.9 Mappresspro Mappress Maps FOR Wordpress 2.83.10 Mappresspro Mappress Maps FOR Wordpress 2.83.11 Mappresspro Mappress Maps FOR Wordpress 2.83.12 Mappresspro Mappress Maps FOR Wordpress 2.83.13 Mappresspro Mappress Maps FOR Wordpress 2.83.14 Mappresspro Mappress Maps FOR Wordpress 2.83.15 Mappresspro Mappress Maps FOR Wordpress 2.83.16 Mappresspro Mappress Maps FOR Wordpress 2.83.17 Mappresspro Mappress Maps FOR Wordpress 2.83.18 Mappresspro Mappress Maps FOR Wordpress 2.83.19 Mappresspro Mappress Maps FOR Wordpress 2.83.20 Mappresspro Mappress Maps FOR Wordpress 2.83.21 Mappresspro Mappress Maps FOR Wordpress 2.83.22 Mappresspro Mappress Maps FOR Wordpress 2.83.23 Mappresspro Mappress Maps FOR Wordpress 2.84 Mappresspro Mappress Maps FOR Wordpress 2.84.1 Mappresspro Mappress Maps FOR Wordpress 2.84.2 Mappresspro Mappress Maps FOR Wordpress 2.84.3 Mappresspro Mappress Maps FOR Wordpress 2.84.4 Mappresspro Mappress Maps FOR Wordpress 2.84.5 Mappresspro Mappress Maps FOR Wordpress 2.84.6 Mappresspro Mappress Maps FOR Wordpress 2.84.7 Mappresspro Mappress Maps FOR Wordpress 2.84.8 Mappresspro Mappress Maps FOR Wordpress 2.84.9 Mappresspro Mappress Maps FOR Wordpress 2.84.10 Mappresspro Mappress Maps FOR Wordpress 2.84.11 Mappresspro Mappress Maps FOR Wordpress 2.84.12 Mappresspro Mappress Maps FOR Wordpress 2.84.13 Mappresspro Mappress Maps FOR Wordpress 2.84.14 Mappresspro Mappress Maps FOR Wordpress 2.84.15 Mappresspro Mappress Maps FOR Wordpress 2.84.16 Mappresspro Mappress Maps FOR Wordpress 2.84.17 Mappresspro Mappress Maps FOR Wordpress 2.84.18 Mappresspro Mappress Maps FOR Wordpress 2.84.19 Mappresspro Mappress Maps FOR Wordpress 2.84.20 Mappresspro Mappress Maps FOR Wordpress 2.84.21 Mappresspro Mappress Maps FOR Wordpress 2.84.22 Mappresspro Mappress Maps FOR Wordpress 2.85 Mappresspro Mappress Maps FOR Wordpress 2.85.1 Mappresspro Mappress Maps FOR Wordpress 2.85.2 Mappresspro Mappress Maps FOR Wordpress 2.85.3 Mappresspro Mappress Maps FOR Wordpress 2.85.4 Mappresspro Mappress Maps FOR Wordpress 2.85.5 Mappresspro Mappress Maps FOR Wordpress 2.85.6 Mappresspro Mappress Maps FOR Wordpress 2.85.7 Mappresspro Mappress Maps FOR Wordpress 2.85.8 Mappresspro Mappress Maps FOR Wordpress 2.85.9 Mappresspro Mappress Maps FOR Wordpress 2.86 Mappresspro Mappress Maps FOR Wordpress 2.86.1 Mappresspro Mappress Maps FOR Wordpress 2.86.2 Mappresspro Mappress Maps FOR Wordpress 2.86.3 Mappresspro Mappress Maps FOR Wordpress 2.86.4 Mappresspro Mappress Maps FOR Wordpress 2.86.5 Mappresspro Mappress Maps FOR Wordpress 2.86.6 Mappresspro Mappress Maps FOR Wordpress 2.86.7 Mappresspro Mappress Maps FOR Wordpress 2.86.8 Mappresspro Mappress Maps FOR Wordpress 2.86.9 Mappresspro Mappress Maps FOR Wordpress 2.86.10 Mappresspro Mappress Maps FOR Wordpress 2.86.11 Mappresspro Mappress Maps FOR Wordpress 2.86.12 Mappresspro Mappress Maps FOR Wordpress 2.86.13 Mappresspro Mappress Maps FOR Wordpress 2.86.14 Mappresspro Mappress Maps FOR Wordpress 2.86.15 Mappresspro Mappress Maps FOR Wordpress 2.86.16 Mappresspro Mappress Maps FOR Wordpress 2.86.17 Mappresspro Mappress Maps FOR Wordpress 2.86.18 Mappresspro Mappress Maps FOR Wordpress 2.87 Mappresspro Mappress Maps FOR Wordpress 2.87.1 Mappresspro Mappress Maps FOR Wordpress 2.87.2 Mappresspro Mappress Maps FOR Wordpress 2.87.3 Mappresspro Mappress Maps FOR Wordpress 2.87.4 Mappresspro Mappress Maps FOR Wordpress 2.87.5 Mappresspro Mappress Maps FOR Wordpress 2.88 Mappresspro Mappress Maps FOR Wordpress 2.88.1 Mappresspro Mappress Maps FOR Wordpress 2.88.2 Mappresspro Mappress Maps FOR Wordpress 2.88.3 Mappresspro Mappress Maps FOR Wordpress 2.88.4 Mappresspro Mappress Maps FOR Wordpress 2.88.5 Mappresspro Mappress Maps FOR Wordpress 2.88.6 Mappresspro Mappress Maps FOR Wordpress 2.88.7 Mappresspro Mappress Maps FOR Wordpress 2.88.8 Mappresspro Mappress Maps FOR Wordpress 2.88.9	163

Common Weakness Enumeration (CWE)

CWE-639 - Authorization Bypass Through User-Controlled Key

References

https://wpscan.com/vulnerability/587acc47-1966-4baf-a380-6aa479a97c82/