🔐 CVE Alert

CVE-2023-46190

MEDIUM 4.3

WordPress Novo-Map : your WP posts on custom google maps Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th

Cross-Site Request Forgery (CSRF) vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin <= 1.1.2 versions.

CWE CWE-352
Vendor novo-media
Product novo-map : your wp posts on custom google maps
Published Oct 24, 2023
Last Updated Apr 28, 2026
Stay Ahead of the Next One

Get instant alerts for novo-media novo-map : your wp posts on custom google maps

Be the first to know when new medium vulnerabilities affecting novo-media novo-map : your wp posts on custom google maps are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Affected Versions

Novo-media / Novo-Map : your WP posts on custom google maps
n/a ≤ 1.1.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗
patchstack.com: https://patchstack.com/database/vulnerability/novo-map/wordpress-novo-map-your-wp-posts-on-custom-google-maps-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Credits

Mika (Patchstack Alliance)