tusharimran CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM tusharimran CVE published 2026-10-16

CVE-2026-19798

The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the set_status() and bulk() functions in the Maps_Controller REST controller in versions up to, and including, 3.0.0. This vulnerability allows authenticated attackers with Contributor-level access and above to publish or unpublish (and bulk-delete) any wpmb_map post, including map [truncated]