CVE-2026-84780: CWE-770 Allocation of Resources Without Limits or Throttling in WPGMaps WP Go Maps

This vulnerability, classified as CWE-770, affects WP Go Maps plugin versions up to 10.1.08. It allows unauthenticated attackers to trigger a denial of service condition by exploiting the lack of resource allocation limits or throttling mechanisms. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no required privileges or user interaction. The impact is limited to availability disruption without confidentiality or integrity loss. No known exploits are reported in the wild, and no official patch or remediation guidance has been published yet.

The vulnerability can be exploited remotely without authentication to cause denial of service, impacting the availability of the WP Go Maps plugin. There is no impact on confidentiality or integrity. This could result in service disruption for users relying on the affected plugin versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing external rate limiting or resource usage monitoring to mitigate potential denial of service attempts.