The Maps Plugin using Google Maps for WordPress plugin before 1.8.4 lacks CSRF checks, enabling attackers to manipulate plugin settings
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
![]() | WordPress WP Google Map plugin <= 1.8.3 - Arbitrary Post Deletion and Plugin's Settings Update via Cross-Site Request Forgery (CSRF) vulnerability | 27 Jan 202200:00 | – | patchstack |
![]() | WordPress Google Maps plugin cross-site request forgery vulnerability | 2 Mar 202200:00 | – | cnvd |
![]() | CVE-2021-25081 | 28 Feb 202209:15 | – | nvd |
![]() | Cross site request forgery (csrf) | 28 Feb 202209:15 | – | prion |
![]() | WP Google Map < 1.8.4 - Arbitrary Post Deletion and Plugin's Settings Update via CSRF | 27 Jan 202200:00 | – | wpvulndb |
![]() | CVE-2021-25081 WP Google Map < 1.8.4 - Arbitrary Post Deletion and Plugin's Settings Update via CSRF | 28 Feb 202209:06 | – | cvelist |
![]() | WP Google Map < 1.8.4 - Arbitrary Post Deletion and Plugin's Settings Update via CSRF | 27 Jan 202200:00 | – | wpexploit |
[
{
"product": "Maps Plugin using Google Maps for WordPress – WP Google Map",
"vendor": "Unknown",
"versions": [
{
"lessThan": "1.8.4",
"status": "affected",
"version": "1.8.4",
"versionType": "custom"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo