Critical plugin flaws disclosed in June 2026 mean attackers can create admin accounts with no password — WP Maps Pro exposes a nonce in every frontend page, making its "protection" worthless. I see sites exploited within hours of disclosure. Patch immediately or remove plugins you are not actively using. #WordPress #Security #WordPressSecurity #PluginSecurity https://wpguy.uk/blog/wordpress-plugin-flaws-in-june-2026-put-thousands-of-business-sites-at-risk/