Unknown RVM – Responsive Vector Maps vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown RVM – Responsive Vector Maps, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.7CVE-2021-24947thinkupthemesresponsive_vector_maps+2
EPSS score
3.06%
The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server