The Privilege Escalation vulnerability discovered in the WP Google Map WordPress plugin (versions <= 1.8.0) allows authenticated low-role users to create, edit, and delete maps.
Credits
Vulnerability discovered by Nguyen Van Khanh (Patchstack Red Team)