Input validation vulnerability in RSV GMaps 1.5

The plugin called RSV GMaps for WordPress has a security issue called Cross-Site Request Forgery. This can happen in any version up to 1.5. The problem is that the plugin does not properly check for a special code called a “nonce” when performing a certain task. This allows someone who is not logged in to the website to change settings and add harmful code by tricking the website administrator into doing something, like clicking on a link.

Detected in:

RSV GMaps open vulnerable versions: >= * <= 1.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.