CVE

CVE-2021-24947

6.5

CVSS

Description

The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server

Attack Vector

Privileges Req.

User Interaction

rvm – responsive vector maps

Updated Oct 24, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24947 Scanner

CVE-2021-24947 scanner - Cross-Site Request Forgery (CSRF) vulnerability in RVM - Responsive Vector Maps plugin for WordPress

Used 2.4k times · 3.4k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: rvm – responsive vector maps

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →