Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Plugin Google Map Backdoor (1.4) - Vulnerability Database

WordPress Plugin Google Map Backdoor (1.4)

Description

WordPress Plugin Google Map contains a backdoor. Attackers can exploit this issue to execute arbitrary commands in the context of the application. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin Google Map version 1.4 is vulnerable.

Remediation

Disable the plugin until a fix is available

References

https://www.pluginvulnerabilities.com/2017/12/20/hundreds-of-websites-still-using-intentionally-malicious-wordpress-plugins-three-years-after-being-removed-from-plugin-directory/
https://www.pluginvulnerabilities.com/2016/10/24/a-good-example-of-why-wordpress-keeping-quiet-about-unfixed-plugin-vulnerabilities-doesnt-make-sense/

Related Vulnerabilities

Apache httpOnly cookie disclosure Medium
Common tags: Missing Update
WordPress Plugin WP Bannerize 'ajax_clickcounter.php' SQL Injection (2.8.6) High
Common tags: Missing Update
WordPress Plugin WP-RecentComments 'page' Parameter Cross-Site Scripting (2.0.6) High
Common tags: Missing Update
WordPress Plugin WP Marketplace TimThumb Arbitrary File Upload (1.1.0) High
Common tags: Missing Update
WordPress Plugin WP Forum Server 'edit_post_id' Parameter SQL Injection (1.7) High
Common tags: Missing Update

Severity

High

Classification

CWE-95
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update