WordPress Plugin Vulnerabilities

WP Google Map Plugin < 4.1.0 - CSRF to Unauthenticated PHP Object Injection

Description

The WP Google Map Plugin WordPress plugin was affected by a CSRF to Unauthenticated PHP Object Injection security vulnerability.

Affects Plugins

Plugin icon
wp-google-map-plugin
Fixed in 4.1.0

References

URL
https://plugins.trac.wordpress.org/changeset/2160647

Classification

Type
OBJECT INJECTION
OWASP top 10
A8: Insecure Deserialization
CWE
CWE-502
CVSS
8.2 (high)

Miscellaneous

Verified
No
WPVDB ID
1574da0d-3401-4e3f-a16e-b450bed22ccd

Timeline

Publicly Published
2019-09-19 (about 6 years ago)
Added
2019-11-13 (about 6 years ago)
Last Updated
2020-09-08 (about 5 years ago)

Other

Published
Title
Published
2025-02-27
Title
WP Activity Log < 5.3.3 - Authenticated (Admin+) PHP Object Injection
Published
2025-05-08
Title
Seil <= 1.7.1 - Unauthenticated PHP Object Injection
Published
2024-04-25
Title
Custom field finder < 0.4 - Authenticated (Author+) PHP Object Injection
Published
2025-03-03
Title
GiveWP < 3.20.0 - Unauthenticated PHP Object Injection
Published
2025-07-06
Title
UNIVERSAM <= 8.72.34 - Unauthenticated PHP Object Injection