A vulnerability marked as critical has been reported in OS DataHub Maps Plugin up to 1.8.3 on WordPress. This vulnerability affects the function
OS_DataHub_Maps_Admin::add_file_and_ext. The manipulation leads to unrestricted upload.
This vulnerability is uniquely identified as CVE-2026-1730. The attack is possible to be carried out remotely. No exploit exists.