CVE-2026-66618

The vulnerability allows SQL injection in WP Maps versions up to 4.9.9, potentially enabling attackers to manipulate database queries and gain unauthorized access to sensitive data. This high-severity flaw poses a significant risk to any installations of the affected plugin, particularly for organizations that rely on it for mapping functionalities. Administrators of websites using WP Maps should prioritize immediate patching or mitigation to prevent exploitation.