Beveiligingsadvies

CVE-2026-8935

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-15 06:00:02

Laatst bijgewerkt 2026-06-15 16:35:19

Toegewezen door WPScan

CVSS-score 9.8

Status PUBLISHED

Beschrijving

The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin access.

← Alle CVE's bekijken Bekijk op cve.org ↗