Threats tagged 'ghsa-mcpf-p8j2-92hw'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-18465WP MAPS PRO · Path Traversal Medium6.5EPSS 0.3%2026-08-09CVE Database V5CVE-2026-18465 The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include and execute arbitrary existing local PHP files on the server. EPSS 0.3%Vulnerability CWE-22 #ghsa-mcpf-p8j2-92hw	CVE Database V5	2026-08-09

Page 1 of 1