https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 19:31:42 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-327309 EUVD-2026-327309 https://cve.radiocsirt.org/vuln/euvd-2026-327309 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8935 <p>The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin access.</p> <p>The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin access.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8935 https://cve.radiocsirt.org/vuln/ghsa-j5mr-6rv3-xgwh <p>The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin access.</p> <p>The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin access.</p> https://cve.radiocsirt.org/vuln/ghsa-j5mr-6rv3-xgwh