This vulnerability is a CSRF issue in the Ultimate Maps plugin by Supsystic, affecting versions up to 1.2.16. It allows an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited integrity impact. The vulnerability does not affect confidentiality or availability. No official fix or vendor advisory has been published yet, and no exploits are known to exist in the wild.

The impact is limited to integrity, where an attacker could cause a user to perform unintended actions within the Ultimate Maps plugin. There is no impact on confidentiality or availability. The medium severity reflects the potential for limited unauthorized changes without elevated privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying CSRF protections such as verifying nonces or tokens in requests if possible, or limiting plugin usage to trusted users. Monitor vendor channels for updates.