https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T18:34:10.588064+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-18464 fkie_cve-2026-18464 2026-10-05T18:34:11.026742+00:00

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service.

 https://vulnerability.circl.lu/vuln/ghsa-r6mj-39cq-7p2p GHSA-r6mj-39cq-7p2p 2026-10-05T18:34:11.026857+00:00

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service.