Lucene search
China National Vulnerability DatabaseCNVD-2023-46121HistoryMay 31, 2023 - 12:00 a.m.
WordPress Easy Google Maps plugin cross-site request forgery vulnerability
2023-05-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
wordpress
google maps
cross-site request forgery
vulnerability
cross-site scripting
web cache poisoning
php
mysql
improper validation
user-supplied input
malicious activities
0.001 Low
EPSS
Percentile
27.7%
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Easy Google Maps plugin version 1.11.7 and earlier versions. The vulnerability stems from improper validation of user-supplied input. An attacker can exploit this vulnerability to conduct cross-site scripting attacks, web cache poisoning, and other malicious activities.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress easy google maps plugin | le | 1.11.7 |
Related
cve
cve
CVE-2023-33926
2023-05-28 20:15:09
cvelist
cvelist
nvd
nvd
CVE-2023-33926
2023-05-28 20:15:09
prion
prion
Cross site request forgery (csrf)
2023-05-28 20:15:00
wordfence
wordfence