CyberRota Analysis
AI-GeneratedThe WP MAPS PRO plugin for WordPress prior to version 6.1.3 is vulnerable due to a lack of capability checks in its AJAX actions, which are accessible to unauthenticated users. This flaw allows attackers to exploit the plugin by triggering uncontrolled recursion, leading to resource exhaustion and potential Denial of Service (DoS) conditions. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of service disruption.
Original NVD Description
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service.