WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

CVE-2026-18464

CVE-2026-18464 — WP Maps Pro 本仓库旨在为已披露的漏洞提供技术参考。它不包含武器化的拒绝服务脚本。 概述 项目| 详情 ---|--- CVE| CVE-2026-18464 产品| WP MAPS PRO 受影响版本| 6.1.3 修复版本| 6.1.3 弱点| CWE-400 — 不受控制的资源消耗 攻击要求| 未认证的远程攻击者 严重性| 7.5 CVSS 3.1 发布日期| 2026-08-09 发现者| Mohammad Aghdasi CNA / 协调方| WPScan 摘要 一个暴露给未认证用户的 AJAX...

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro "...

CVE-2026-8732-EXPLOIT

CVE-2026-8732 – WordPress WP Maps Pro エクスプロイト 認証なし管理者乗っ取り | CVSS 9.8 | すぐに使用可能 🔥 入手できるもの CVE-2026-8732 用の完全動作する Python エクスプロイト 認証なしでの管理者アカウント作成 マジックログイン URL を返却 – サイトを即座に乗っ取り WP Maps Pro ≤ 6.1.0 に対して動作 サイレントでクリーン、デフォルトでログを残しません ⚡ 私たちから購入する理由 50以上の脆弱なターゲットでテスト済み 不要なコードなし – 純粋なエクスプロイト...

CVE-2026-8732-PoC

CVE-2026-8732 — WP Maps Pro 未認証管理者作成 English | Türkçe 日本語 概要 CVE-2026-8732 は、WP Maps Pro wp-google-map-gold WordPressプラグイン（バージョン = 6.1.0）における重大な脆弱性（CVSS 9.8）です。 未認証の攻撃者は、wpgmptempaccessajax AJAXアクションを悪用してWordPress管理者アカウントを作成できます。エンドポイントを保護するnonceはフロントエンドページに公開されて埋め込まれているため、アクセス制御メカニズムとして機能しません。...

CVE-2026-8732

⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — 認証不要の権限昇格 8フェース自動化エクスプロイト | マルチプロセッシング + Asyncio | 検証済み管理者作成 🎯 脆弱性について WordPressプラグイン WP Maps Pro バージョン ≤ 6.1.0 には、認証不要の権限昇格 脆弱性が存在します。攻撃者は資格情報なしで 管理者 アカウントを作成し、サイトを完全に制御できます。 この脆弱性は、FlipperCodeベンダーのサポートチーム向けに設計された「Temporary Access」機能に起因しますが、適切な保護なしに公開されています。...

CVE-2026-8732

CVE-2026-8732 — WP Maps Pro ≤ 6.1.0 ♡ 管理者アカウント作成による未認証の権限昇格 ♡ === shadow ♡ & friska === 📋 脆弱性情報 項目| 詳細 ---|--- CVE ID| CVE-2026-8732 CVSS スコア| 9.8 Critical CVSS ベクター| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H タイプ| 重要な機能に対する認証の欠如 プラグイン| WP Maps Pro wp-google-map-gold 影響を受けるバージョン| すべてのバージョン ≤...

Exploit for CVE-2026-18464

CVE-2026-18464 — WP Maps Pro This repository is intended as a...

Exploit for CVE-2026-8732

CVE-2026-8732 — WP Maps Pro Unauthenticated Admin Creation E...

WordPress WP Maps Pro plugin < 6.1.3 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Jakub Herman in WordPress Plugin Advanced Google Maps versions 6.1.3...

WordPress WP Maps Pro plugin < 6.1.3 - Unauthenticated Denial of Service vulnerability

Unauthenticated Denial of Service vulnerability discovered by Mohammad Aghdasi in WordPress Plugin Advanced Google Maps versions 6.1.3...

CVE-2026-18465

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

CVE-2026-18464

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

CVE-2026-18464 WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

CVE-2026-18464 WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

CVE-2026-18465 WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

CVE-2026-18465

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

CVE-2026-18464

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

EUVD-2026-54879

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

CVE-2026-18464

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...