Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-18464 The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and do… https://www.cve.org/CVERecord?id=CVE-2026-18464
Post summary
WP MAPS PRO WordPress plugin versions before 6.1.3 are vulnerable due to a missing capability check on an AJAX endpoint, allowing unauthenticated users to potentially exploit the flaw.
🚨*CVE* CVE-2026-18464 The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and do… https://www.cve.org/CVERecord?id=CVE-2026-18464 ----- Traducción: CVE-2026-18464 El … http://infoflow.cloud`
Post summary
CVE-2026-18464 affects the WP MAPS PRO WordPress plugin before version 6.1.3 by lacking a capability check on an AJAX action that unauthenticated users can access.