WordPress Plugin Vulnerabilities

WP Google Maps <= 7.11.27 - Admin Settings CSRF

Description

The WP Google Maps WordPress plugin was affected by an Admin Settings CSRF security vulnerability.

Affects Plugins

Plugin icon
wp-google-maps
Fixed in 7.11.28

References

URL
https://plugins.trac.wordpress.org/changeset/2099647/wp-google-maps/trunk/legacy-core.php?old=2092302&old_path=wp-google-maps%2Ftrunk%2Flegacy-core.php

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
a394c82c-83e2-40e9-a886-dcfb5abe9b7e

Timeline

Publicly Published
2019-06-03 (about 6 years ago)
Added
2019-06-12 (about 6 years ago)
Last Updated
2019-11-18 (about 6 years ago)

Other

Published
Title
Published
2025-02-20
Title
WPUpper Share Buttons < 3.52 - Cross-Site Request Forgery to Custom CSS Update
Published
2022-10-24
Title
Auto Upload Images < 3.3.1 - CSRF
Published
2024-07-09
Title
SociallyViral <= 1.0.10 - Cross-Site Request Forgery
Published
2025-04-17
Title
Add to Header <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2017-01-11
Title
WordPress <= 4.7 - Cross-Site Request Forgery (CSRF) via Flash Upload