https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T19:31:52.232364+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-327309 EUVD-2026-327309 2026-10-12T19:31:52.234510+00:00 EUVD-2026-327309 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8935 fkie_cve-2026-8935 2026-10-12T19:31:52.234537+00:00

The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin access.

 https://cve.radiocsirt.org/vuln/ghsa-j5mr-6rv3-xgwh GHSA-j5mr-6rv3-xgwh 2026-10-12T19:31:52.234566+00:00

The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin access.