CVE-2022-25600

WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability

Published Mar 11, 2022 CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Description
Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <= 4.2.3).

Remediation

Vendor Solution

Update to 4.2.4 or higher version.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-30260 Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <= 4.2.3).
History
Type Values Removed Values Added
First Time appeared Weplugins
Weplugins wp Maps
CPEs cpe:2.3:a:flippercode:wp_google_map:*:*:*:*:*:wordpress:*:* cpe:2.3:a:weplugins:wp_maps:*:*:*:*:*:wordpress:*:*
Vendors & Products Flippercode
Flippercode wp Google Map
Weplugins
Weplugins wp Maps
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Patchstack
Published
Updated
Apr 28, 2026, 4:07 PM
Reserved
Feb 21, 2022, 12:00 AM
Status
Modified
Published
Mar 11, 2022, 6:15 PM
Modified
Jun 17, 2026, 4:33 AM