VYPR
Medium severity5.4NVD Advisory· Published Oct 25, 2024· Updated Jun 17, 2026

CVE-2024-9584

CVE-2024-9584

Description

The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.0.20. This makes it possible for authenticated attackers with contributor-level privileges or above, to add, update or delete map projects.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • WordPress/Image Map Prollm-fuzzy2 versions
    <=6.0.20+ 1 more
    • (no CPE)range: <=6.0.20
    • (no CPE)
  • imagemappro/Image Map Pro – Drag-and-drop Builder for Interactive Imagesv5
    Range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.