Novo-Map : your WP posts on custom google maps <= 1.1.2 - CSRF

2023-10-2600:00:00

wpscan.com

wordpress

plugin

csrf

vulnerability

security

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

References

patchstack.com/database/vulnerability/novo-map/wordpress-novo-map-your-wp-posts-on-custom-google-maps-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability

www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/novo-map/novo-map-your-wp-posts-on-custom-google-maps-112-cross-site-request-forgery