WordPress Plugin for Google Maps – WP MAPS, CVE-2026-6381
- CVE, Research URL
- Application
- Published on
- May 18, 2026
- Research Description
- The WP Maps WordPress plugin before 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inclusion attacks.
- Affected versions
-
max 4.9.3.
- Status
-
vulnerable