This vulnerability in flippercode Advanced Google Maps plugin results from missing authorization checks, enabling users with limited privileges to bypass access controls. It affects all versions up to 5.8.4. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact. No patch or vendor advisory is currently provided, and no exploits are known.

The vulnerability allows an attacker with low privileges to perform unauthorized actions that could modify data or functionality within the plugin, potentially leading to integrity issues. There is no impact on confidentiality or availability reported. Since no known exploits exist in the wild, the immediate risk is moderate but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's administrative functions to trusted users only and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges to users who do not require them.