HTML5 Maps <= 1.7.1.4 - Cross-Site Request Forgery
medium
The HTML5 Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1.4. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown action granted they can trick a site admi...
- CVSS:
- 4.3
- Affected:
- up to 1.7.1.4
- Fixed in:
- 1.7.1.5
- Disclosed:
- Oct 12, 2023
CVE-2023-45650 on NVD →
HTML5 Maps <= 1.6.5.6 - Cross-Site Request Forgery
high
Cross-site request forgery (CSRF) vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
- CVSS:
- 8.8
- Affected:
- up to 1.6.5.6
- Fixed in:
- 1.6.5.7
- Disclosed:
- Jun 24, 2019
CVE-2019-5983 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database