Lucene search
+L

817 matches found

CNNVD
CNNVD
added 2022/06/20 12:0 a.m.5 views

WordPress plugin Inline Google Maps 跨站请求伪造漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Inline Google Maps 5.11 and earlier versions are vulnerable to cross-site request forgery, which stems from not...

6.5CVSS5AI score0.00513EPSS
SaveExploits2References2
CNVD
CNVD
added 2022/06/17 12:0 a.m.82 views

WordPress plugin Google Maps cross-site request forgery vulnerability

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Google Maps 1.2.1 and previous versions have a cross-site request forgery vulnerability, which can be exploited by attacke...

5.4CVSS2.6AI score0.00415EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/15 4:15 p.m.6 views

CVE-2022-29453

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

4.3CVSS5.8AI score0.00415EPSS
SaveExploits0References2
NVD
NVD
added 2022/06/15 4:15 p.m.32 views

CVE-2022-29453

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

5.4CVSS0.00415EPSS
SaveExploits0References2
Prion
Prion
added 2022/06/15 4:15 p.m.13 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

4.3CVSS4.7AI score0.00415EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/15 3:16 p.m.33 views

CVE-2022-29453 WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

5.4CVSS5.8AI score0.00415EPSS
SaveExploits0References2
CVE
CVE
added 2022/06/15 3:16 p.m.585 views

CVE-2022-29453

The CVE-2022-29453 entry concerns the WordPress plugin API KEY for Google Maps (versions

5.4CVSS4.7AI score0.00415EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/06/15 3:16 p.m.9 views

CVE-2022-29453 WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

5.4CVSS5.5AI score0.00415EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/06/15 12:0 a.m.30 views

WordPress plugin Google Maps 跨站请求伪造漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Google Maps 1.2.1 and previous versions have a cross-site request forgery vulnerability, which can be exploited by attacke...

5.4CVSS5.5AI score0.00415EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/06/08 10:50 a.m.4 views

CVE-2022-29453

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

5.4CVSS4.9AI score0.00415EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2022/06/08 12:0 a.m.40 views

WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update

CSRF vulnerability leading to Google Maps API key update discovered by Rasi Afeef Patchstack Alliance in WordPress API KEY for Google Maps plugin versions = 1.2.1. Solution Update the WordPress API KEY for Google Maps plugin to the latest available version at least 1.2.2...

5.4CVSS2.9AI score0.00415EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2022/06/08 12:0 a.m.21 views

API KEY for Google Maps < 1.2.2 - Arbitrary API Key Update via CSRF

The plugin does not have CSRF in place when updating the API key, allowing attackers to make a logged in admin perform such action via a CSRF attack...

5.4CVSS5.5AI score0.00415EPSS
SaveExploits0Affected Software1
wpexploit
wpexploit
added 2022/05/30 12:0 a.m.133 views

Inline Google Maps <= 5.11 - Arbitrary Settings Update to Stored XSS via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping ' document.getElementById"test".submit;...

6.5CVSS1AI score0.00513EPSS
SaveExploits2
Schneier on Security
Schneier on Security
added 2022/05/20 7:5 p.m.19 views

The Onion on Google Map Surveillance

"Google Maps Adds Shortcuts through Houses of People Google Knows Arent Home Right Now." Excellent satire...

0.8AI score
SaveExploits0
CNVD
CNVD
added 2022/04/27 12:0 a.m.14 views

WordPress Plugin Easy Google Maps Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the version of WordPress plugin Easy Google Maps before 1.9.32, which can be exploited by attackers...

6.1CVSS6.3AI score0.00788EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/25 4:16 p.m.6 views

CVE-2021-46780

The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.00788EPSS
SaveExploits1References2
NVD
NVD
added 2022/04/25 4:16 p.m.17 views

CVE-2021-46780

The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.00788EPSS
SaveExploits1References1
Prion
Prion
added 2022/04/25 4:16 p.m.20 views

Cross site scripting

The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...

4.3CVSS6.1AI score0.00788EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/04/25 3:50 p.m.78 views

CVE-2021-46780

The vulnerability CVE-2021-46780 affects the WordPress plugin Easy Google Maps (before 1.9.32). The issue is a Reflected Cross-Site Scripting (XSS) in the admin dashboard where the tab parameter is not escaped before output in an attribute, enabling injected script in some contexts. Mitigation: u...

6.1CVSS6.1AI score0.00788EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/04/25 12:0 a.m.7 views

WordPress plugin Easy Google Maps 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the version of WordPress plugin Easy Google Maps before 1.9.32, which can be exploited by attackers...

6.1CVSS5.6AI score0.00788EPSS
SaveExploits1References3
Rows per page
Query Builder