Medium · 5.4 CVE-2022-25600 EUVD-2022-30260GHSA-hm3x-qqp4-vg9x

WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability

Published Mar 11, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Flipper Code Product: WP Google Map Plugin (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <= 4.2.3).

Affected products

Vendor	Product	Affected	Fixed
Flippercode	WP Google Map Plugin (WordPress plugin)	<= 4.2.3 – ≤ 4.2.3	—

References

https://wordpress.org/plugins/wp-google-map-plugin/#developers
https://patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wp-google-map-plugin-4-2-3-cross-site-request-forgery-csrf-vulnerability
FEDORA-2022-4b3079c1be vendor-advisory
FEDORA-2022-956b6078fb vendor-advisory
FEDORA-2022-706aac2786 vendor-advisory