CVE-2020-12077

CVE-2020-12077 describes a remote code execution vulnerability in the MapPress Google Maps for WordPress plugin, affecting versions prior to 2.53.9. This flaw stems from improper implementation of AJAX functions, lacking sufficient nonces or capability checks. With a CVSS score of 8.8 (High), successful exploitation allows authenticated attackers to achieve high impact on confidentiality, integrity, and availability. While the EPSS score indicates a higher-than-average probability of exploitation, there is currently no public exploit code available (Metasploit, Nuclei, ExploitDB) and no evidence of active exploitation or significant community discussion.