Threats tagged 'ghsa-gwmh-v933-p43v'

The Mapster WP Maps WordPress plugin versions prior to 2.0.6 contain a vulnerability where a REST API route that modifies post data lacks authorization checks. This flaw allows unauthenticated attackers to overwrite post titles, create new published posts, and alter the plugin's stored settings.