Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2026-18466 The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX…

Description

The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create an unlimited number of options in the database, each of which is loaded on every page request.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Maps 4.9 premières → < 4.9.8 4.9.8

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de WP Maps

Les 7 CVE de WP Maps →
CVE-2026-16265 The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not… 6.5 Moyenne CVE-2026-16263 The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not… 8.8 Élevée CVE-2026-6381 The WP Maps WordPress plugin before 4.9.3 does not properly sanitize a parameter before using it in a file path,… 7.5 Élevée CVE-2025-3504 The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high… 3.5 Faible
Suivre cette CVE