Cross-Site Request Forgery in Easy Google Maps Plugin for WordPress
CVE-2023-2526
5.4MEDIUM
What is CVE-2023-2526?
The Easy Google Maps plugin for WordPress is susceptible to Cross-Site Request Forgery due to improper nonce validation in the AJAX action handler. This weakness allows unauthenticated attackers to perform AJAX actions by tricking the site administrator into executing a malicious request, potentially leading to unauthorized actions on behalf of the victim.
Affected Version(s)
Easy Google Maps * <= 1.11.7