CVE-2026-118638

The Mapster WP Maps WordPress plugin (versions prior to 2.0.6 ) contains an authorization vulnerability within a REST API route used for writing post data. Due to a lack of authorization checks, an unauthenticated attacker can overwrite the titles of arbitrary posts, create new published posts, o...