CVE-2023-45052

Summary

CVE-2023-45052 is a newly disclosed Cross-Site Request Forgery (CSRF) vulnerability affecting version 5.0 and below of the dan009 WP Bing Map Pro plugin for WordPress. This issue allows an attacker to trick a user into making unintended actions on a web application, in this case the WordPress site running the vulnerable plugin. An attacker can craft a malicious request that, when executed by the user, will result in unauthorized modifications or sensitive data disclosures. This vulnerability poses a serious risk to WordPress sites using the dan009 WP Bing Map Pro plugin and should be addressed promptly by applying the available patch or upgrading to a non-vulnerable version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.