PatchSiren

Mapster WP Maps CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Mapster WP Maps CVE published 2026-08-01

CVE-2026-14839

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-01T07:16:30.947Z and has not been modified since then. The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, inc [truncated]