WordPress Plugin Directory Team Missed Settings Change Vulnerability in Maps Widget for Google Maps
Earlier this week one of the most popular WordPress plugins, Maps Widget for Google Maps, which has 100,000+ installs, was closed on the Plugin Directory and then reopened after the name was changed (it was previously Google Maps Widget) and security changes were made. One of the security changes doesn’t really make sense to us. In the file /gmw-tracking.php this line was changed:
62 |
if (isset($_GET['gmw_tracking']) && $_GET['gmw_tracking'] == 'opt_in') { |