WP Maps Pro

WP Maps Pro has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 7.4, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Missing Authentication For Critical Function, behind 1 of the records (25%). Other recurring categories include Missing Authorization, Path Traversal.

Every one of the 4 issues recorded for WP Maps Pro has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each.

01234567891017.04.2025Today17.04.20254.3Advanced Google Maps <= 5.8.4 - Missing Authorization CVSS 4.3 · 17.04.202528.05.20269.8WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action CVSS 9.8 · 28.05.202603.08.20267.5Maps Pro <= 6.1.2 - Unauthenticated Denial of Service CVSS 7.5 · 03.08.20268.1Maps Pro <= 6.1.2 - Unauthenticated Local File Inclusion CVSS 8.1 · 03.08.2026

Strategic Overview

Avg CVSSHigh
7.4/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all WP Maps Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-8732

WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C