Auto Publish For Google My Business Project CVEs and Security Vulnerabilities

Vulnerabilities (Auto Publish For Google My Business Project)

CVE-2023-47237

WordPress WP Google My Business Auto Publish Plugin <= 3.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson Auto Publish for Google My Business plugin <= 3.7 versions.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Auto Publish For Google My Business Project

Products

Auto Publish For Google My Business

CVE-2022-4790

WP Google My Business Auto Publish < 3.4 - Contributor+ Stored XSS via Shortcode

The WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.