Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WP Maps 4.9.7 Clear all filters
TI-2026-13600 CVE-2026-16265 · GHSA-29w4-w235-2pmp

WP Maps < 4.9.7 - Subscriber+ Denial of Service

Priority MEDIUM 62

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a Subscriber account to trigger uncontrolled…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00411 Published 2026-08-07 Fixed in 4.9.7 CWE-400
TI-2026-13598 CVE-2026-16263 · GHSA-v8wm-6qmw-j72p

WP Maps < 4.9.7 - Subscriber+ Local File Inclusion

Priority HIGH 73

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Su…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00535 Published 2026-08-07 Fixed in 4.9.7 CWE-22