#CVE-2026-8732

Unauthenticated Admin-Account Bug in WP Maps Pro Draws Active Exploitation

CVE-2026-8732 lets attackers create administrator accounts without credentials — and exploitation is already underway against live WordPress installations.