CVE-2023-3412

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.0. This is due to a missing capability check on the ajax_store_save() function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify plugin settings and inject malicious web scripts.

• CWE-79

• https://plugins.trac.wordpress.org/browser/image-map-pro-lite/trunk/image-map-pro-wordpress-lite.php#L410Issue Tracking
• https://www.wordfence.com/threat-intel/vulnerabilities/id/b58403df-af09-4d74-88e6-140e3f2f291b?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/image-map-pro-lite/trunk/image-map-pro-wordpress-lite.php#L410Issue Tracking
• https://www.wordfence.com/threat-intel/vulnerabilities/id/b58403df-af09-4d74-88e6-140e3f2f291b?source=cveThird Party Advisory

Published

Jun 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34114Exposure of resource to wrong sphere in Zoom for Windows and…6.5
• CVE-2023-34115Buffer copy without checking size of input in Zoom Meeting …3.8
• CVE-2023-34116Improper input validation in the Zoom Desktop Client for Win…8.8
• CVE-2023-34117Relative path traversal in the Zoom Client SDK before versio…3.3
• CVE-2023-34118Improper privilege management in Zoom Rooms for Windows befo…7.8
• CVE-2023-34119Insecure temporary file in the installer for Zoom Rooms for …7.8
• CVE-2023-34120Improper privilege management in Zoom for Windows, Zoom Room…7.8
• CVE-2023-34121Improper input validation in the Zoom for Windows, Zoom Roo…8.8
• CVE-2023-34122Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-34123Use of Hard-coded Cryptographic Key vulnerability in SonicWa…7.5
• CVE-2023-34124The authentication mechanism in SonicWall GMS and Analytics …9.8
• CVE-2023-34125Path Traversal vulnerability in GMS and Analytics allows an …6.5