The Next Web

A WordPress plugin sold to 15,000 sites has a flaw that lets anyone create an admin account ...

CVE-2026-8732 in WP Maps Pro lets unauthenticated attackers create admin accounts on 15,000+ WordPress sites. Wordfence blocked 2,858 attacks in 24 hours.