WP Maps Pro bug exploited to create admin accounts on WordPress sites
2026-05-31T19:23:33Z•369b60c492bae78734d900b96964ab6d85ea25bf2ec6132f5996343c674df8a8
23andmeCIFSwitchCVE-2026-0257ai-powered-luresandroid-ratanthropicbotnet-takedownbtmobcharter-communicationschatgpt-abusechrome-dbscdata-breachddos-as-a-serviceglobalprotectgreyvibelinuxlocal-privilege-escalationmalware-deliverypalo-altopan-osplugin-vulnerabilityrootunauthenticated-admin-creationwordpresswp-maps-pro
What happened
Multiple high-impact security developments: attackers are actively exploiting a vulnerable WP Maps Pro WordPress plugin to create unauthenticated admin accounts, and a PAN‑OS GlobalProtect authentication bypass (CVE-2026-0257) is now observed in the wild. A new Linux local privilege escalation dubbed "CIFSwitch" can yield root on multiple distributions. Threat actors are abusing ChatGPT share links to host fake outage pages that deliver malware, while AI (ChatGPT/Gemini) is being used to craft lures by clusters like GreyVibe. Large-scale incidents and industry moves include a 17M‑device botnet
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 369b60c492bae78734d900b96964ab6d85ea25bf2ec6132f5996343c674df8a8
- Enrichment time
- 2026-05-31T19:23:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.