CVE-2021-25081

The CVE-2021-25081 entry concerns the WordPress Google Maps plugin (WP Google Map) before version 1.8.4. The vulnerability arises because the plugin’s AJAX actions largely lack CSRF checks, enabling a CSRF attacker to coerce a logged-in administrator into performing privileged actions such as del...

CVE-2021-25011

The CVE-2021-25011 entry concerns the WordPress Maps Plugin using Google Maps pre-1.8.1. The public details in connected documents show a lack of proper authorization and CSRF protection in most AJAX actions, enabling any authenticated user (e.g., Subscriber) to perform dangerous actions such as ...

CVE-2024-13208

The Maps Plugin using Google Maps for WordPress (versions prior to 1.9.4 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to properly sanitise and escape certain settings. This vulnerability allows high-privilege users, such as administrators, to perform XSS attacks, even in ...

CVE-2024-13306

The Maps Plugin using Google Maps for WordPress (versions prior to 1.9.4 ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to sanitise and escape certain plugin settings, which allows high-privilege users, such as administrators, to execute malicious scr...