2636 matches found
MAL-2022-227 Malicious code in @eg-maps/commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 683771ccbf7865145f726b98e031ef733f7c549710df47bd019217e6373df1e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4480 Malicious code in maps-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77941a159908349eb82d90ae8105f74c66d5bfaeb4879e9e0f96bffcdd1b4b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in maps-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77941a159908349eb82d90ae8105f74c66d5bfaeb4879e9e0f96bffcdd1b4b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-677 Malicious code in @uc-maps/api.react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f409bbd4d44a1d019c99abc6d3f4c3fdb6caf61568a7a1235c25fe5ff3995c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-679 Malicious code in @uc-maps/geospatial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6991935d20b411c2ed3710ebf423c8b205e514c20f5ca2937bd0cfc55ad8d2f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-680 Malicious code in @uc-maps/layer-select.react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e16c28c35ea063cec1fb2f23764d6be10526f72c11c42bc40879a61a2383ff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-678 Malicious code in @uc-maps/boundaries-core.react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f279f06f2a6375dfe5f8632d2e53e7c315fed145e3d5babe3fe2338fd70e1e8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-683 Malicious code in @uc-maps/provider-google.react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b2ee3e9a228c29b1fa9a48eab565e4eee93260225f30d535417f36ee2b48d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-682 Malicious code in @uc-maps/parcel-shapes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5355ff2e8d842acde41df4dad7dba63eabaac16403d4789e204cdcbd93035e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-686 Malicious code in @uc-maps/tile-layers.react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af3f6d0d5c3454a78142a0ac415c1e72c55d7f50e15e914045f1c9940ae83d3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-1829
The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...
CVE-2022-1829
The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...
Cross site scripting
The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...
WordPress plugin Inline Google Maps 跨站请求伪造漏洞
WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Inline Google Maps 5.11 and earlier versions are vulnerable to cross-site request forgery, which stems from not...
WordPress plugin Google Maps cross-site request forgery vulnerability
WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Google Maps 1.2.1 and previous versions have a cross-site request forgery vulnerability, which can be exploited by attacke...
CVE-2022-29453
Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...
CVE-2022-29453
Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...
CVE-2022-29453
The CVE-2022-29453 entry concerns the WordPress plugin API KEY for Google Maps (versions
CVE-2022-29453 WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update
Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...