CVE-2015-9308

HIGH

weplugins/wp_maps < 2.3.10 - Cross-Site Request Forgery in Add/Edit Map Feature

Title source: llm

The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.

Core 2

Core References

Product, Release Notes x_refsource_misc

Third Party Advisory x_refsource_misc

CVSS v3 8.8

EPSS 0.0070

EPSS Percentile 48.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-352

Status published

Products (1)

weplugins/wp_maps < 2.3.10

Published Aug 14, 2019

Tracked Since Feb 18, 2026