A vulnerability classified as problematic was found in WP Go Maps Plugin up to 10.0.04 on WordPress. This affects the function processBackgroundAction of the component Map Engine Setting Handler. Executing a manipulation can lead to missing authorization.

This vulnerability is registered as CVE-2026-0593. It is possible to launch the attack remotely. No exploit is available.