These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include and execute arbitrary existing local PHP files on the server.
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service. This vulnerability affects users of the WP MAPS PRO plugin, particularly WordPress administrators and security teams monitoring for Denial of Service attacks. The [truncated]