SVG Map Plugin <= 1.0.0 - Cross-Site Request Forgery zu Einstellungen Aktualisierung und Stored Cross-Site Scripting

The primary impact of CVE-2025-13519 is the ability for an attacker to execute arbitrary JavaScript code within the context of a user's browser. This can lead to session hijacking, defacement of the WordPress site, redirection to malicious websites, and theft of sensitive information. The vulnerability stems from insufficient nonce validation on AJAX actions like 'savedata', 'deletedata', and 'add_popup'. An attacker could craft a malicious link or form that, when clicked by a site administrator, would trigger these actions with forged parameters, injecting the attacker’s script. This is a particularly concerning attack vector because it requires only social engineering to trick an administrator, rather than exploiting a technical flaw in the WordPress core.

WordPress sites utilizing the SVG Map by Smjrifle plugin, particularly those with administrative accounts that are susceptible to social engineering attacks, are at risk. Shared hosting environments where plugin updates are managed centrally are also vulnerable if the plugin hasn't been updated.

• wordpress / composer / npm:

grep -r 'admin-ajax.php\?action=save_data' /var/www/html/wp-content/plugins/svg-map-by-smjrifle/

• wordpress / composer / npm:

wp plugin list --status=inactive | grep svg-map-by-smjrifle

• wordpress / composer / npm:

wp plugin list | grep svg-map-by-smjrifle

1. 2026-01-06Disclosure

   disclosure

1. Reserviert2025-11-21
2. Veröffentlicht2026-01-06
3. Geändert2026-04-15
4. EPSS aktualisiert2026-03-23

The immediate mitigation for CVE-2025-13519 is to cease using the plugin until a patched version is available. As a temporary workaround, consider implementing a Web Application Firewall (WAF) rule to block requests to the vulnerable AJAX endpoints ('/wp-admin/admin-ajax.php?action=savedata', '/wp-admin/admin-ajax.php?action=deletedata', '/wp-admin/admin-ajax.php?action=add_popup') that lack proper nonce validation. Carefully review any recent plugin updates or modifications for suspicious code. Monitor WordPress logs for unusual activity or attempts to access these endpoints. After a patched version is released, upgrade the plugin immediately and confirm the fix by attempting to trigger the vulnerable AJAX actions with manipulated parameters – they should now be rejected due to proper nonce validation.

Aktive Installationen

0

Plugin-Bewertung