CVE-2022-25600

ALTO 8.8CVE-2022-25600 · Published 11/03/2022 · updated 17/06/2026

In breve

CVE-2022-25600 è una vulnerabilità ALTO (CVSS 8.8) che riguarda wp maps (weplugins).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.57%, superiore al 47.1% delle vulnerabilità.
Correzione: aggiornare a 4.2.4 o successiva.

Package	Affected versions	Patched versions
wp maps weplugins	`< 4.2.4`	`4.2.4`

Description

Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <= 4.2.3).

References

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7CR6VGITIB2TXXZ6B5QRRWPU5S4BXQPD
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJX6NVXSRN3RX3YUVEJQ4WUTQSDL3DSR
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZQCIZQI267YHVYSFB3CRKNK3F4ASPLK
patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wp-google-map-plugin-4-2-3-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
wordpress.org/plugins/wp-google-map-plugin · Release Notes

Altre vulnerabilità di wp maps

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free