Anthropic is having a month.

The AI lab finished May by surpassing OpenAI in market share of business spending for the first time, Ramp just revealed. It raised $65 billion at a $965 billion valuation (also besting OpenAI) at the end of May, then waltzed into June by filing confidential paperwork for an IPO, reportedly on the strength of its first-ever profitable quarter.

Then on Friday, the Trump administration renewed its war on the model maker by sending a letter demanding it ban non-Americans, including Anthropic’s employees, from accessing its state-of-the-art models: the limited-release Mythos 5 and the more guarded version of Mythos released to the public three days earlier, called Fable 5.

This essentially forced Anthropic to pull its latest all-powerful model from the market altogether.

Although the White House invoked an obscure export control directive when ordering the ban, the exact cause remains unclear. The chatter was that hackers easily bypassed Fable 5’s guardrails, which were intended to prevent access to Mythos’ capabilities. That model is so good at finding security flaws in software code that Anthropic itself marketed it as dangerous and restricted its public release.

This new drama comes after Anthropic famously refused to allow the government to use its models for mass surveillance of Americans and fully autonomous weapons. As a result, in March, the Trump administration declared the company a supply-chain risk.

That didn’t deter Anthropic’s sales to businesses. Quite the opposite, Ramp’s data shows. Ironically, this latest feud with the Trump administration, which also appears to validate the hubbub over Mythos’ mythological power, may help rather than hurt Anthropic, according to Ramp’s lead economist, Ara Kharazian. Kharazian is the person who compiled the business-spending AI data.

“If anything, it’ll probably boost them,” Kharazian told TechCrunch. “Anthropic’s best month on record, as far as business adoption, was the month that the Department of Defense labeled them a supply-chain risk. There’s a lot of aura that comes with your model specifically being named too dangerous to use.”

Ramp’s data isn’t granular enough for us to see how much of a financial hit the company will take by pulling Mythos and Fable 5 off the market.

Still the data, from more than 70,000 businesses that use its platform, shows that customers heavily use Anthropic’s Opus models and that business use has been growing.

For instance, Ramp reported that Anthropic’s share of AI subscriptions paid for by businesses rose 2.5 percentage points in May to 41%. This compares to OpenAI, which commanded 39.5% of AI subscriptions by its customers, essentially flat from the prior month. (OpenAI still greatly leads Anthropic in overall consumer usage, according to new data from Sensor Tower.)

Beyond subscriptions, the vast majority of what companies spend money on is API calls to the model, which cover token use for activities like coding. Anthropic’s Claude Code has a strong reputation as a powerful AI coding tool.

Ramp can’t always see from the spending data which models most businesses are using. When it can see the model details — in about one-third of transactions — businesses are mostly spending on various flavors of Claude Opus, particularly the later versions. Opus is the model that preceded Mythos and is still openly available.

In fact, in late May, Anthropic released a new version, Opus 4.8.

Mythos had not been on the market for that long, having been released to limited users as of April. And Fable 5 was shut down after a few days.

While we can’t predict how this latest drama with the White House will impact Anthropic’s ability to go public as it hoped to (public-market investors tend to be wary of companies embroiled in controversies with the government), the numbers indicate that Anthropic’s available models are more popular with businesses than ever before.

TL;DR

A critical vulnerability (CVE-2026-8732, CVSS 9.8) in the WP Maps Pro WordPress plugin allows unauthenticated attackers to create admin accounts and take over sites. Wordfence blocked 2,858 exploitation attempts in 24 hours, with the flaw patched in version 6.1.1.

A critical vulnerability in WP Maps Pro, a commercial WordPress plugin with more than 15,000 sales on the Envato Market, is being actively exploited by attackers to create malicious administrator accounts on vulnerable sites. The flaw, tracked as CVE-2026-8732 with a CVSS score of 9.8, allows unauthenticated users to gain full administrative control of any WordPress installation running an unpatched version of the plugin.

Wordfence, which discovered the exploitation campaign, reported blocking 2,858 attacks targeting the vulnerability in the 24 hours prior to its disclosure. The flaw affects all versions of WP Maps Pro up to and including 6.1.0 and was patched in version 6.1.1, released on 20 May 2026. Security researcher David Brown is credited with discovering and reporting the issue.

How the exploit works

WP Maps Pro includes a “temporary access” feature designed to let the plugin’s support staff log into a customer’s site during troubleshooting. The feature exposes an AJAX action called “wpgmp_temp_access_ajax” that can create a new WordPress user with administrator privileges. The security architecture behind the feature was fundamentally flawed: the action was registered with WordPress’s “wp_ajax_nopriv_” hook, meaning it could be called by unauthenticated visitors.

The only protection was a nonce check, a token meant to prevent cross-site request forgery. But the nonce was publicly embedded into every frontend page of the site via the “wpgmp_local” JavaScript object, rendering it useless as an access control mechanism. Any visitor could read the nonce from the page source and use it to invoke the function.

An attacker who calls the endpoint with the parameter “check_temp=false” triggers the “wpgmp_temp_access_support()” function, which unconditionally creates a new WordPress user with the hardcoded role of administrator and returns a magic login URL. Visiting that URL calls “wp_set_auth_cookie()” to fully authenticate the attacker as the newly created admin. The entire chain, from unauthenticated request to full site takeover, requires no credentials, no social engineering, and no prior access.

The plugin and its reach

WP Maps Pro allows site owners to embed customisable Google Maps and OpenStreetMap views with markers, listings, and advanced location features. It is commonly used as a store locator tool for businesses that need to help users find nearby locations, view details, and get directions. The plugin is sold through the Envato Market (CodeCanyon), not through WordPress’s official plugin directory, which means updates are not distributed through the standard WordPress auto-update mechanism.

That distribution model creates a particular risk. Site owners who purchased the plugin may not receive automatic notifications about the security update, and many WordPress installations are maintained by non-technical users or agencies that do not monitor vulnerability disclosures. Unlike large-scale cybercrime infrastructure that law enforcement can target with server seizures, WordPress plugin vulnerabilities are exploited through distributed, automated scanning campaigns that are difficult to disrupt.

What site owners should do

The patch in version 6.1.1 restricts the temporary access endpoint to authenticated administrators only. Site owners running WP Maps Pro should update immediately. Those who cannot update should disable the plugin until they can apply the patch. Checking for unexpected administrator accounts in the WordPress user list is a practical first step to determine whether a site has already been compromised.

The vulnerability is a textbook example of a pattern that recurs across the WordPress ecosystem: a support or debugging feature that grants elevated privileges, protected by a security mechanism that does not actually restrict access. Vulnerability disclosure programmes and security researchers like Brown play a critical role in catching these flaws before they cause widespread damage, but the 2,858 attacks blocked in a single day demonstrate that the window between disclosure and exploitation is now measured in hours, not weeks.