CVE-2026-16265

The CVE-2026-16265 entry concerns the WP Maps WordPress plugin prior to version 4.9.7. It describes a vulnerability where a missing capability check in one of the plugin’s AJAX actions allows a Subscriber-level user to trigger an operation that dispatches uncontrolled recursion, exhausting server...