CVE-2012-10018

The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and including 6.1, 1.0 respectively. This makes it possible for attackers to forgery requests coming from a vulnerable site's server and ultimately perform an XSS attack if requesting an SVG file.

• CWE-918

• https://packetstormsecurity.com/files/161919/Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/161920/Exploit, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/2503447Patch
• https://www.mapplic.com/docs/#changelogRelease Notes
• https://www.wordfence.com/threat-intel/vulnerabilities/id/5aacabb5-94af-485a-af24-e84db3e3726f?source=cveThird Party Advisory

Published

Oct 16, 2024

Last Modified

Jun 16, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-10012A vulnerability has been found in BestWebSoft Facebook Like …8.8
• CVE-2012-10013A vulnerability was found in Kau-Boy Backend Localization Pl…6.1
• CVE-2012-10014A vulnerability classified as problematic has been found in …6.1
• CVE-2012-10015A vulnerability was found in BestWebSoft Twitter Plugin up t…8.8
• CVE-2012-10016A vulnerability classified as problematic has been found in …7.5
• CVE-2012-10017A vulnerability was found in BestWebSoft Portfolio Plugin up…8.8
• CVE-2012-10019The Front End Editor plugin for WordPress is vulnerable to a…9.8
• CVE-2012-1002SQL injection vulnerability in author/edit.php in OpenConf 4…
• CVE-2012-10020The FoxyPress plugin for WordPress is vulnerable to arbitrar…9.8
• CVE-2012-10021A stack-based buffer overflow vulnerability exists in D-Link…9.8
• CVE-2012-10022Kloxo versions 6.1.12 and earlier contain two setuid root bi…8.5
• CVE-2012-10023A stack-based buffer overflow vulnerability exists in FreeFl…9.8