PT-2026-33263 · WordPress · Basic Google Maps Placemarks

Chawabhon Netisingha · Published 2026-04-16 · Updated 2026-04-16 · CVE-2026-3581

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Basic Google Maps Placemarks versions prior to 1.10.8

Description The Basic Google Maps Placemarks plugin for WordPress contains an authorization bypass. The issue arises because the plugin fails to properly verify if a user is authorized to perform specific actions, allowing unauthenticated attackers to modify stored map latitude and longitude options.

Recommendations Update the plugin to a version later than 1.10.7.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-3581

Affected Products

Basic Google Maps Placemarks

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-3581 · Security Note
• https://twitter.com/CVEnew/status/2044701564108210444 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/b8a2bbfe-eb87-4e26-ba20-bc406d681124?source=cve · Note
• https://twitter.com/VulmonFeeds/status/2044771540244307998 · Twitter Post
• https://plugins.trac.wordpress.org/changeset/3495944/basic-google-maps-placemarks · Note