Cross site request forgery (csrf)

The Maps Plugin using Google Maps for WordPress plugin before 1.8.4 does not have CSRF checks in most of its AJAX actions, which could allow attackers to make logged in admins delete arbitrary posts and update the plugin's settings via a CSRF attack...

Cross site request forgery (csrf)

The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings...

CVE-2021-25081

The CVE-2021-25081 entry concerns the WordPress Google Maps plugin (WP Google Map) before version 1.8.4. The vulnerability arises because the plugin’s AJAX actions largely lack CSRF checks, enabling a CSRF attacker to coerce a logged-in administrator into performing privileged actions such as del...

CVE-2021-25081 WP Google Map < 1.8.4 - Arbitrary Post Deletion and Plugin's Settings Update via CSRF

The Maps Plugin using Google Maps for WordPress plugin before 1.8.4 does not have CSRF checks in most of its AJAX actions, which could allow attackers to make logged in admins delete arbitrary posts and update the plugin's settings via a CSRF attack...

CVE-2021-25011 WP Google Map < 1.8.1 - Subscriber+ Arbitrary Post Deletion and Plugin's Settings Update

The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings...

CVE-2021-25011

The CVE-2021-25011 entry concerns the WordPress Maps Plugin using Google Maps pre-1.8.1. The public details in connected documents show a lack of proper authorization and CSRF protection in most AJAX actions, enabling any authenticated user (e.g., Subscriber) to perform dangerous actions such as ...

WordPress Interactive Geo Maps plugin <= 1.5.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Interactive Geo Maps plugin versions = 1.5.3. Solution Update the Interactive Geo Maps plugin to the latest available version at least 1.5.4...

WordPress WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin <= 1.0.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Google Street View with 360° virtual tour & Google maps + Local SEO plugin versions = 1.0.8. Solution Update the WordPress WP Google Street View with 360° virtual tour & Google maps + Local SEO plugin to the latest availabl...

WordPress WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin <= 1.0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Google Street View with 360° virtual tour & Google maps + Local SEO plugin versions = 1.0.8. Solution Update the WordPress WP Google Street View with 360° virtual tour & Google maps + Local SEO plug...

WordPress Map Plugin alternative to Google Maps using MapQuest, with directions plugin <= 2.15.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Map Plugin alternative to Google Maps using MapQuest, with directions plugin versions = 2.15.7. Solution Update the WordPress Map Plugin alternative to Google Maps using MapQuest, with directions plugi...

WordPress Interactive Geo Maps plugin <= 1.5.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Interactive Geo Maps plugin versions = 1.5.3. Solution Update the Interactive Geo Maps plugin to the latest available version at least 1.5.4...

WordPress 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin Google Maps, which stems from the WordPress...

WordPress plugin Maps 跨站请求伪造漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. A cross-site request forgery vulnerability exists in versions of the WordPress Google Maps plugin prior to 1.8.4. The vulnerability stems from the plugin's failure to perform CSRF checks in most ...

PT-2022-9568 · WordPress · Maps Plugin Using Google Maps

Name of the Vulnerable Software and Affected Versions: Maps Plugin using Google Maps for WordPress versions prior to 1.8.1 Description: The issue concerns a lack of proper authorization and CSRF protection in most AJAX actions of the plugin, potentially allowing any authenticated user to delete...

WordPress Map Plugin alternative to Google Maps using MapQuest, with directions plugin <= 2.15.7 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Map Plugin alternative to Google Maps using MapQuest, with directions plugin versions = 2.15.7. Solution Update the WordPress Map Plugin alternative to Google Maps using MapQuest, with directions plugin to the latest available...

CVE-2021-46676

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the transactional maps name field...

WordPress MapPress Maps plugin cross-site scripting vulnerability

WordPress is the WordPress Wordpress Foundation's set of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress MapPress Maps plugin prior to 2.73.4. The vulnerability stems from the fact that the MapPress Maps plugin does not...

CVE-2022-0208

The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the "Bad mapid" error message, leading to a Reflected Cross-Site Scripting...

CVE-2022-0208

The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the "Bad mapid" error message, leading to a Reflected Cross-Site Scripting...

GHSA-RMR5-CPV2-VGJF Denial of Service by injecting highly recursive collections or maps in XStream

Impact The vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. Patches XStream 1.4.19 monitors and accumulates the...