The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the fc-call-nonce nonce, which is publicly embedded into every frontend page via wplocalizescript as the nonce field of the wpgmplocal JavaScript object, rendering the check ineffective as an access control mechanism. This makes it possible for unauthenticated attackers to invoke the wpgmptempaccesssupport handler with checktemp=false, which unconditionally creates a new WordPress user with the hardcoded role of administrator via wpinsertuser() and returns a magic login URL that, when visited, calls wpsetauthcookie() to fully authenticate the attacker as the newly created administrator, resulting in complete site takeover.