PT-2025-1489 · 10Web · 10Web Map Builder For Google Maps

Abdi Pranata · Published 2025-01-02 · Updated 2025-01-03 · CVE-2023-45272

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions 10Web Map Builder for Google Maps versions 1.0.73 and earlier

Description A Missing Authorization issue allows the exploitation of incorrectly configured access control security levels. This problem is related to the configuration of security levels, which can be exploited if not set up correctly.

Recommendations For versions 1.0.73 and earlier, update to a version later than 1.0.73 to resolve the issue. As a temporary workaround, consider reviewing and correcting the configuration of access control security levels to minimize the risk of exploitation.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-45272

Affected Products

10Web Map Builder For Google Maps

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-45272 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45272 · Vendor Advisory
• https://patchstack.com/database/wordpress/plugin/wd-google-maps/vulnerability/wordpress-10web-map-builder-for-google-maps-plugin-1-0-73-notice-dismissal-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1874977682712080516 · Twitter Post
• https://twitter.com/CVEnew/status/1875033759357026397 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/wd-google-maps/vulnerability/wordpress-10web-map-builder-for-google-maps-plugin-1-0-73-notice-dismissal-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/14167 · Telegram Post