The vulnerability identified as CVE-2025-32138 affects the Easy Google Maps plugin by supsystic. It arises from improper restriction of XML External Entity references, enabling XML injection attacks. This can lead to partial compromise of confidentiality, integrity, and availability of the affected system. The issue affects versions up to 1.11.18. The CVSS 3.1 base score is 6.6, reflecting a network attack vector with low attack complexity but requiring high privileges and no user interaction. The vulnerability has been published but lacks publicly available patch or mitigation details.

Successful exploitation of this vulnerability could allow an attacker with high privileges to perform XML injection, potentially leading to information disclosure, modification of data, or disruption of service. The impact is rated medium severity based on the CVSS score of 6.6. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor supsystic's communications for updates. Until a fix is available, restricting access to the plugin and limiting privileges may reduce risk.