CVE-2021-25081

The CVE-2021-25081 entry concerns the WordPress Google Maps plugin (WP Google Map) before version 1.8.4. The vulnerability arises because the plugin’s AJAX actions largely lack CSRF checks, enabling a CSRF attacker to coerce a logged-in administrator into performing privileged actions such as del...

CVE-2021-25011

The CVE-2021-25011 entry concerns the WordPress Maps Plugin using Google Maps pre-1.8.1. The public details in connected documents show a lack of proper authorization and CSRF protection in most AJAX actions, enabling any authenticated user (e.g., Subscriber) to perform dangerous actions such as ...

CVE-2024-13208

The Maps Plugin using Google Maps for WordPress is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in versions prior to 1.9.4 . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to ...

CVE-2024-13306

The Maps Plugin using Google Maps for WordPress (versions prior to 1.9.4 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform S...