Source evidence

Wordfence Flagging Your Plugin with a Security Vulnerability

HTML5 Maps · support · 2023-10-19T13:52:00+00:00

HTML5 Maps plugin evidence original source source API

questionsentiment

highseverity

0.83relevance

1replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

3 / 19 rows with source links

15.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

16 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

Molesque71 resolved

Description The HTML5 Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1.4. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown action granted they can trick a site administrator into performing an action such as clicking on a link. The impact of this vulnerability is unknown. References patchstack.com The page I need help with: [ log in to see the link] Hello, Thank you for your message! It’s been fixed. You need to update the plugin to the newest version.

Commercial Context

Opportunity

local listing and directory operations

World Map directory accuracy workflow for keeping listings, locations, maps, and directory submissions accurate

Buyer: directory owners, local businesses, agencies, and marketplace operators

Wedge: audit world map submissions, map visibility, listing freshness, spam, and local-lead routing

Investigate Pain card complete market

Analysis

heuristic-v1

Summary: Wordfence Flagging Your Plugin with a Security Vulnerability: users show security, missing feature, support pain that may indicate a product gap.

Evidence quote: Wordfence Flagging Your Plugin with a Security Vulnerability Description The HTML5 Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1.4.

Affected feature: form

security missing feature support form

Plugin

API

HTML5 Maps

5.0K active installs · 409.6K downloads · rating 92.0

clickable map geo map interactive map us map world map

Comments

1 shown

html5maps 2023-10-24T10:44:00+00:00

Hello, Thank you for your message! It’s been fixed. You need to update the plugin to the newest version.