CVE-2026-18464

Name of the Vulnerable Software and Affected Versions WP MAPS PRO versions prior to 6.1.3

Description An issue exists where the plugin fails to perform a capability check in an AJAX action available to unauthenticated users. Because the operation it dispatches is not restricted, unauthenticated attackers can trigger uncontrolled recursion, which exhausts server resources and leads to a Denial of Service (DoS), a condition where a service is unavailable to its intended users.

Recommendations Update WP MAPS PRO to version 6.1.3 or later.