Output validation vulnerability in WordPress Plugin for Google Maps – WP MAPS 4.1.0

The WP Google Maps Plugin for WordPress, up to and including version 4.1.0, is vulnerable to a security threat called Cross-Site Request Forgery. This means that, if an unauthenticated attacker is able to get a site administrator to click on a malicious link, then the attacker could exploit a function called save() that does not have proper security measures (also called nonce validation) in place. This could lead to something called PHP Object Injection.