PT-2022-17394 · WordPress · Wp Google Maps

Re-Alter + 1 · Published 2022-03-11 · Updated 2022-04-19 · CVE-2022-25600

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP Google Map plugin versions <= 4.2.3

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that affects certain functions in the WP Google Map plugin, specifically the Delete Marker Category, Delete Map, and Copy Map functions.

Recommendations For WP Google Map plugin versions <= 4.2.3, update to a version higher than 4.2.3 to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-25600

Affected Products

Wp Google Maps

References · 8

• https://osv.dev/vulnerability/CVE-2022-25600 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25600 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJX6NVXSRN3RX3YUVEJQ4WUTQSDL3DSR · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZQCIZQI267YHVYSFB3CRKNK3F4ASPLK · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7CR6VGITIB2TXXZ6B5QRRWPU5S4BXQPD · Vendor Advisory
• https://patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wp-google-map-plugin-4-2-3-cross-site-request-forgery-csrf-vulnerability · Note
• https://wordpress.org/plugins/wp-google-map-plugin/#developers · Note
• https://t.me/cibsecurity/38820 · Telegram Post