← Database

CVE-2026-6381

HIGH CVSS: 7.5 Published: 2026-05-18 Modified: 2026-06-17

Description

The WP Maps WordPress plugin before 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inclusion attacks.

Affected Platforms

Unknown

Weakness Type

CWE-22

References