The Next Web

A WordPress plugin sold to 15,000 sites has a flaw that lets anyone create an admin account, and attackers are already using it

CVE-2026-8732 in WP Maps Pro lets unauthenticated attackers create admin accounts on 15,000+ WordPress sites. Wordfence blocked 2,858 attacks in 24 hours.

WP Maps Pro bug exploited to create admin accounts on WordPress sites

Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating rogue ...
AARP

6 Money-Saving Hacks That Don’t Actually Work

Javascript must be enabled to use this site. Please enable Javascript in your browser and try again. Insider secrets from top experts. Helpful insights you won’t ...
AARP

Summer Preview: 32 of the Season’s Top New Books

Help Register Login Login Hi, %{firstName}% Hi, %{firstName}% Games Car rental Grab your beach chair or crank up the air-conditioning, and dive into a few (or all!) of these 32 fantastic new reads ...

KnowledgeDeliver flaw exploited as a zero-day to install web shells

Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell.