Medium · 5.4 CVE-2023-28172 EUVD-2023-31880GHSA-v875-jq76-xxp6

WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Published Nov 12, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Flipper Code Product: WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) plugin <= 4.4.2 versions.

Affected products

Vendor	Product	Affected	Fixed
flippercode	WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin)	≤ 4.4.2	—

References

https://patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wp-maps-plugin-4-4-2-cross-site-request-forgery-csrf?_s_id=cve