VulnSocial

CVE-2026-0593Patch

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the processBackgroundAction() function in all versions up to, and including, 10.0.04. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global map engine settings.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-01-28: 1Patch / Workaround · 2026-01-28: 1Technical Details · 2026-01-28: 101-28
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Mark McNeece@bsolveit
    Patch

    🚨 300,000 WordPress sites at risk. WP Go Maps has a vulnerability that lets attackers modify your map data WITHOUT logging in. That means fake store locations. Misdirected customers. Phishing links. Update to 10.0.05 NOW. https://www.365iwebdesign.co.uk/news/2026/01/28/wp-go-maps-vulnerability-cve-2026-0593/ #WordPress #CyberSecurity #WebSecurity #SmallBusiness #WPSecurity

    Post summary

    A CVE‑2026‑0593 vulnerability in WP Go Maps lets unauthenticated users alter map data, enabling phishing via fake store locations. The advisory urges an immediate update to version 10.0.05.

    0000036
    188 followersView on X

Explore more

Back to dashboard