CVE-2026-14839

The vulnerability affects the Mapster WP Maps WordPress plugin prior to version 1.24.0. The root cause is lack of authorization and post-status checks on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post, including unpublished items (draft, ...