Breach404
Back to Insights
Compliance2 min readMay 31, 2026

WP Maps Pro bug exploited to create admin accounts on WordPress sites

Attackers are actively exploiting a vulnerability in the WP Maps Pro WordPress plugin to create unauthorized administrator accounts on affected websites without needing any authentication credentials. If your organization uses WordPress with this plugin,

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free