The wp-google-map-plugin plugin prior to 2.3.10 for WordPress has CSRF in the add/edit map feature.
flippercode wp google map