CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-2755

Multiple cross-site request forgery (CSRF) vulnerabilities in the AB Google Map Travel (AB-MAP) plugin before 4.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) lat (Latitude), (2) long (Longitude), (3) map_width, (4) map_height, or (5) zoom (Map Zoom) parameter in the ab_map_options page to wp-admin/admin.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 71.0%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2015-2755

Ab Google Map Travel Project » Ab Google Map Travel » Version: N/A

cpe:2.3:a:ab_google_map_travel_project:ab_google_map_travel:-
Ab Google Map Travel Project » Ab Google Map Travel » Version: 1.0

cpe:2.3:a:ab_google_map_travel_project:ab_google_map_travel:1.0
Ab Google Map Travel Project » Ab Google Map Travel » Version: 1.1

cpe:2.3:a:ab_google_map_travel_project:ab_google_map_travel:1.1
Ab Google Map Travel Project » Ab Google Map Travel » Version: 1.2

cpe:2.3:a:ab_google_map_travel_project:ab_google_map_travel:1.2
Ab Google Map Travel Project » Ab Google Map Travel » Version: 2.1

cpe:2.3:a:ab_google_map_travel_project:ab_google_map_travel:2.1
Ab Google Map Travel Project » Ab Google Map Travel » Version: 3.1

cpe:2.3:a:ab_google_map_travel_project:ab_google_map_travel:3.1
Ab Google Map Travel Project » Ab Google Map Travel » Version: 3.2

cpe:2.3:a:ab_google_map_travel_project:ab_google_map_travel:3.2
Ab Google Map Travel Project » Ab Google Map Travel » Version: 3.3

cpe:2.3:a:ab_google_map_travel_project:ab_google_map_travel:3.3
Ab Google Map Travel Project » Ab Google Map Travel » Version: 3.4

cpe:2.3:a:ab_google_map_travel_project:ab_google_map_travel:3.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-2755

Products

Pricing

Contact Us