CVE Database /
CVE-2015-9309
CVE · High
CVE-2015-9309 — WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin] < 2.3.10
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2015-9309
|
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin] < 2.3.10 |
Cross-Site Request Forgery (CSRF) |
High
8.8
|
< 2.3.10
|
2.3.10 |
2015-08-21 |
—
|
CVE-2015-9309
The wp-google-map-plugin for WordPress versions prior to 2.3.10 contains a cross-site request forgery vulnerability in its category addition and modification functionality. An attacker could exploit this weakness to perform unauthorized actions on behalf of authenticated users without their knowledge or consent. The issue affects the administrative features responsible for managing map categories within the plugin.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings