CVE-2026-8732

⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — تصعيد الصلاحيات بدون مصادقة أتمتة استغلال من 8 مراحل | تعدد العمليات + Asyncio | إنشاء مدير موثَّق 🎯 حول الثغرة إضافة ووردبريس WP Maps Pro الإصدار ≤ 6.1.0 تحتوي على ثغرة تصعيد صلاحيات بدون مصادقة. يمكن للمهاجم دون أي بيانات اعتماد إنشاء حساب مدير والاستيلاء...

CVE-2026-8732

CVE-2026-8732 — WP Maps Pro ≤ 6.1.0 ♡ अप्रमाणित विशेषाधिकार वृद्धि Unauthenticated Privilege Escalation व्यवस्थापक खाता निर्माण के माध्यम से ♡ === shadow ♡ & friska === 📋 भेद्यता जानकारी फ़ील्ड| विवरण ---|--- CVE आईडी| CVE-2026-8732 CVSS स्कोर| 9.8 गंभीर CVSS वेक्टर|...

CVE-2026-8732-EXPLOIT

CVE-2026-8732 – WordPress WP Maps Pro शोषण अप्रमाणित व्यवस्थापक अधिग्रहण | CVSS 9.8 | उपयोग के लिए तैयार 🔥 आपको क्या मिलता है CVE-2026-8732 के लिए पूरी तरह काम करने वाला Python शोषण अप्रमाणित व्यवस्थापक खाता निर्माण जादुई लॉगिन URL लौटाता है – तत्काल साइट अधिग्रहण WP Maps Pro ≤ 6.1.0 के विरुद्ध क...

WordPress WP Maps Pro plugin < 6.1.3 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Jakub Herman in WordPress Plugin Advanced Google Maps versions 6.1.3...

CVE-2026-18465

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

CVE-2026-18464 WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

CVE-2026-18465 WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

Exploit for CVE-2026-8732

CVE-2026-8732 — WP Maps Pro ≤ 6.1.0 ♡ Unauthenticated Privil...

VulnCheck KEV: CVE-2026-8732

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

WordPress plugin WP Maps Pro 访问控制错误漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

15,000 WordPress Sites Affected by Administrator Account Creation Vulnerability in WP Maps Pro WordPress Plugin

On March 24th, 2026, we received a submission for an Unauthenticated Administrator Account Creation vulnerability in WP Maps Pro, a WordPress plugin with more than 15,000 sales. This vulnerability makes it possible for unauthenticated attackers to create new administrator accounts on the affected...