The vulnerability is a missing authorization flaw that allows an attacker to bypass the access controls enforced by the Responsive Google Map plugin. As a result, unauthorized users may be able to create, modify, or delete map entries, or view configuration options that should be restricted. This weakness is classified as CWE-862: Missing Authorization. The vulnerability description does not indicate that arbitrary code execution is possible.

The issue affects all installations of the Jogesh Responsive Google Map plugin with a version of 3.1.5 or earlier. Any WordPress site that uses a vulnerable version is susceptible, regardless of the site's environment or user base.

The CVSS score of 5.3 represents a moderate severity. The EPSS score of less than 1% indicates a low likelihood of exploitation currently. The vulnerability is not listed in the CISA KEV catalog. Attackers would likely target a publicly accessible WordPress site and use the web interface to send crafted requests that exploit the broken access controls. No information is available that the flaw could be leveraged for further escalation or remote code execution.