WordPress plugin
WP Maps Pro security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium1
- Low0
All WP Maps Pro vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated Denial of Service ≤6.1.2Update to 6.1.3 | CVE-2026-18464 | |
| High8.1 | Unauthenticated Local File Inclusion ≤6.1.2Update to 6.1.3 | CVE-2026-18465 | |
| Critical9.8 | Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action ≤6.1.0Update to 6.1.1 | CVE-2026-8732 |
- High7.5Unauthenticated Denial of Service
≤6.1.2Update to 6.1.3
- High8.1Unauthenticated Local File Inclusion
≤6.1.2Update to 6.1.3
- Critical9.8Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action
≤6.1.0Update to 6.1.1
WP Maps Pro: common questions
Does WP Maps Pro have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in WP Maps Pro: 1 critical, 2 high, 1 medium. None are known to affect version null.
How do I check which version of WP Maps Pro I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Maps Pro vulnerability?
CVE-2026-18464, published Aug 3, 2026: Maps Pro <= 6.1.2 - Unauthenticated Denial of Service. Severity: High (CVSS 7.5).
Is any WP Maps Pro vulnerability listed in CISA KEV?
No. None of the known WP Maps Pro vulnerabilities is currently listed in the CISA KEV catalog.