The AB Google Map Travel (AB-MAP) WordPress plugin was affected by a CSRF/Stored XSS security vulnerability.
packetstormsecurity.com/files/130960/
packetstormsecurity.com/files/131155/
seclists.org/bugtraq/2015/Mar/125