The wp-google-map-plugin plugin prior to 2.3.10 for WordPress has CSRF in the add/edit location feature.
flippercode wp google map