Description
WordPress Plugin Maps Widget for Google Maps-Google Maps Builder is prone to an open redirect vulnerability because the application fails to properly verify user-supplied input. Exploiting this issue may allow attackers to redirect users to arbitrary web sites and conduct phishing attacks; other attacks are also possible. WordPress Plugin Maps Widget for Google Maps-Google Maps Builder version 4.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.02 or latest
References
Related Vulnerabilities
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (7.9)
WordPress Plugin Multi Feed Reader Multiple Vulnerabilities (2.2.4)
WordPress Plugin Import any XML or CSV File to WordPress Multiple Vulnerabilities (3.2.4)
WordPress Plugin Htaccess by BestWebSoft Cross-Site Request Forgery (1.8.1)
WordPress Plugin Cart66 Lite::WordPress Ecommerce Multiple Vulnerabilities (1.5.1.14)