Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-8732-PoC — CVE-2026-8732 | WP Maps Pro <= 6.1.0 Unauth Admin Creation | Kitploit
Tools/GitHubGitHub/fientix/cve-2026-8732-poc
ReconnaissanceVulnerability ScannersExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubfientix/cve-2026-8732-poc

CVE-2026-8732-PoC

CVE-2026-8732 | WP Maps Pro <= 6.1.0 Unauth Admin Creation

View Repository
9 hours agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-8732 — WP Maps Pro Unauthenticated Admin Creation

English | Türkçe

English

Overview

CVE-2026-8732 is a critical vulnerability (CVSS 9.8) in the WP Maps Pro (wp-google-map-gold) WordPress plugin (version <= 6.1.0). Unauthenticated attackers can create WordPress administrator accounts by abusing the wpgmp_temp_access_ajax AJAX action. The nonce protecting the endpoint is publicly embedded in frontend pages, rendering it ineffective as an access control mechanism.

Authors: fientix & quake

Features

  • Single URL scanning or bulk multi-target scanning via list (-l).
  • Multi-threaded execution (-t).
  • Automatic saving of vulnerable administrator credentials (-o).
  • Custom request timeout (--timeout).
  • Verbose console logging (-v).

Usage

root@kitploit:~
# Single Target Scan
python CVE-2026-8732.py -u https://example.com -v

# Multi-Target Bulk Scan & Save Results
python CVE-2026-8732.py -l targets.txt -t 20 -o success.txt

# Custom Timeout (Seconds)
python CVE-2026-8732.py -l targets.txt --timeout 15

Türkçe

Genel Bakış

CVE-2026-8732, WP Maps Pro (wp-google-map-gold) WordPress eklentisinin <= 6.1.0 sürümlerinde bulunan kritik düzeyde (CVSS 9.8) bir zafiyettir. Yetkisiz saldırganlar, wpgmp_temp_access_ajax AJAX eylemini kötüye kullanarak yetkisiz şekilde yönetici (admin) hesabı oluşturabilirler. İsteği koruması gereken nonce değeri ön yüzde herkese açık olarak yayınlandığından erişim kontrolü işlevini yitirmektedir.

Yazarlar: fientix & quake

Özellikler

  • Tek hedef URL taraması veya liste üzerinden toplu tarama (-l).
  • Çoklu iş parçacığı (multi-threading) desteği (-t).
  • Başarılı yönetici hesaplarını dosyaya kaydetme (-o).
  • İsteğe bağlı zaman aşımı süresi ayarlama (--timeout).
  • Detaylı konsol çıktısı (-v).

Kullanım

root@kitploit:~
# Tek Hedef Taraması
python CVE-2026-8732.py -u https://example.com -v

# Çoklu Hedef Taraması ve Sonuçları Kaydetme
python CVE-2026-8732.py -l targets.txt -t 20 -o success.txt


# Özel Zaman Aşımı Süresi (Saniye)
python CVE-2026-8732.py -l targets.txt --timeout 15

"Thank you so much for your support on this project, @Quake-py"

Download Tool