The wp-google-map-plugin plugin prior to 2.3.10 for WordPress has CSRF in the add/edit category feature.
flippercode wp google map