Threats tagged 'ghsa-29w4-w235-2pmp'

WP Maps WordPress plugin versions before 4.9.7 contain a vulnerability where an AJAX action lacks proper capability checks, allowing Subscriber-level users to trigger uncontrolled recursion. This leads to exhaustion of server resources and results in a Denial of Service condition. The vulnerability is identified as CWE-400 (Uncontrolled Resource Consumption) and has a CVSS score of 6.5 (medium severity). No official patch or remediation guidance is currently available.