CVE-2023-3411

CVE-2023-3411 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress, specifically in versions up to and including 1.0.0. This flaw stems from a lack of nonce validation in the ajax_store_save() function. An unauthenticated attacker could exploit this by tricking an administrator into clicking a malicious link, leading to modification of plugin settings and injection of web scripts. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with low complexity and a potential for low integrity impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.