The AB Google Map Travel plugin for WordPress, developed by Aboobacker, contains a CSRF vulnerability in versions up to 4.6. This vulnerability allows attackers to induce authenticated users to perform unintended actions via crafted requests. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation of this CSRF vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users, potentially leading to partial compromise of confidentiality, integrity, and availability of affected systems. The vulnerability is rated high severity with a CVSS score of 7.1. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or restricting use of the AB Google Map Travel plugin to trusted users only, and avoid clicking on untrusted links while authenticated. Monitor vendor channels for updates and apply patches promptly once released.