CyberRota
← Ana sayfaya dön

CVE-2026-8935

CRITICAL · CVSS 9.8 EPSS %0.27

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-15T08:16:22.100 · Çekilme zamanı: 2026-06-30T18:21:20.120970+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-8935
Severity
CRITICAL
CVSS
9.8
EPSS
%0.27
WordPress

Orijinal NVD Açıklaması

The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin access.