Unknown Wp Maps Pro vulnerabilities

3 CVEs affecting Unknown Wp Maps Pro, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18465, published 2026-08-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-8935, published 2026-06-15. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script,…
CVE-2026-18464, published 2026-08-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it…
CVE-2026-18465, published 2026-08-09. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a…