What is the CVSS score of EUVD-2025-17309?

EUVD-2025-17309 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Interactive Regional Map of Florida are affected by EUVD-2025-17309?

CVE-2025-49441 presents moderate security risk, a missing authorization vulnerability rated CVSS 5.3. Attackers could gain access beyond their authorized level.

How to fix or mitigate EUVD-2025-17309?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Interactive Regional Map of Florida EUVD-2025-17309

| CVE-2025-49441 MEDIUM

Missing Authorization (CWE-862)

2025-06-06 audit@patchstack.com

WordPress Authentication Bypass Wordpress Plugin

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

vuln.today AI

5.3 MEDIUM

AV:N, AC:L, PR:N, UI:N per description; only integrity impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 18:10 euvd

EUVD-2025-17309

Analysis Generated

Mar 14, 2026 - 18:10 vuln.today

CVE Published

Jun 06, 2025 - 13:15 nvd

MEDIUM 5.3

DescriptionCVE.org

Missing Authorization vulnerability in WP Map Plugins Interactive Regional Map of Florida allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Interactive Regional Map of Florida: from n/a through 1.0.

AnalysisAI

Missing authorization in the WordPress plugin Interactive Regional Map of Florida up to version 1.0 allows unauthenticated attackers to modify plugin settings or data due to broken access controls. The vulnerability has a low EPSS score (0.06%) and no public exploit or active exploitation has been identified.

Technical ContextAI

The vulnerability is a Missing Authorization (CWE-862) in the WordPress plugin Interactive Regional Map of Florida. The plugin likely fails to enforce proper capability checks on AJAX actions or admin pages, allowing unauthenticated users to access functions intended for administrators. The CVSS vector indicates network-based, low-complexity exploitation with no privileges or user interaction required, but only low integrity impact.

RemediationAI

Update the plugin to the latest version if a patched version is available. As of analysis, no patched version has been confirmed. If no update exists, consider disabling the plugin or implementing a web application firewall (WAF) rule to block unauthorized access to plugin endpoints. Alternatively, restrict access to the plugin's admin pages via .htaccess or server-level authentication.