maps – Gaming Master https://gaming.vmondeika.com Get daily gaming updates with us Fri, 12 Jun 2026 08:07:33 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 Tundra leaves the scene, GLYPH’s hilarious clip, Save-‘s 1,000 maps: Dota 2’s wild week https://gaming.vmondeika.com/tundra-leaves-the-scene-glyphs-hilarious-clip-save-s-1000-maps-dota-2s-wild-week/ https://gaming.vmondeika.com/tundra-leaves-the-scene-glyphs-hilarious-clip-save-s-1000-maps-dota-2s-wild-week/#respond Fri, 12 Jun 2026 08:07:33 +0000 https://gaming.vmondeika.com/tundra-leaves-the-scene-glyphs-hilarious-clip-save-s-1000-maps-dota-2s-wild-week/ tundra esports leave dota 2

It’s been a really wild week in Dota 2. We have all sorts of stuff happening, from one of the largest Dota teams leaving, underdog teams leaving good impressions, and a familiar face up to his usual tricks.

Here’s everything that went down in this Dota 2 week that we think you should know about. Or that just happened to entertain us.

Keep Reading
  • South American Dota 2 teams were done dirty at The International 2026
  • Team Spirit’s new squad, Xtreme Gaming’s coaching drama, Sundabule goes to “OG University”: Dota 2’s controversial week

Tundra Exits Dota 2 as Sustainability Concerns Continue to Grow

1,953 days, a TI victory, nine S-tier titles, and $14.8 million in prize money later – Tundra Esports has officially decided to pull the plug and exit the Dota 2 scene. 

It’s really concerning that the London-based organization was arguably the most successful squad of the 2026 season. They’ve won four S-tier titles – the most of any team this season – and earned themselves direct invites to both the Esports World Cup and The International, and they still couldn’t make it work.

The organization hasn’t specified a reason for its exit, but the roster will at least stay intact. 1win Team has acquired the players, meaning Neta “33” Shapira and company will play under a new tag for the rest of the season. 

It’s no surprise a squad like the Tundra boys quickly found a new home, but the optics really aren’t great. We’ve already seen paiN Gaming and HEROIC leave this year due to sustainability concerns, but those were mid-sized organizations with middling teams. 

Tundra was – and if we ignore recency bias, still is – the best team in the world this year. If an org as successful as Tundra decides the scene is no longer worth investing in, I wonder what that means for everyone else. 

I think we can all agree that Dota 2 esports isn’t on its best trajectory right now, and if Valve isn’t going to step in, the scene will have to figure it out on its own. Betting companies like 1win have become increasingly visible in the ecosystem, whether they’re funding teams through sponsorships or straight up owning them. 

Now, I’m not saying it’s a great solution, but it’s very possible that Dota 2 will have to lean more heavily on gambling sponsors in the near future. I don’t think it’s the most glamorous look for the scene, but with orgs continuing to drop like flies, that might simply be the reality we’re heading toward.

Whether that’s a good thing is an entirely different conversation.

Save- Celebrates 1,000 Maps Played for BetBoom Team

Speaking of betting site orgs, Vitalie “Save-” Melnic has recently hit a milestone of 1,000 maps played under the BetBoom Team banner. He’s been a constant presence on this team since the 2023 season, weathering every roster shuffle thrown at him.

It hasn’t always been smooth sailing for BB Team, as they actually started out pretty rough. In Save-’s first year, the team couldn’t secure any notable results, but he stuck with them through thick and thin. 

Things started clicking in 2024, with three second-place finishes at S-tier events before the team finally won their first Tier 1 trophy at BLAST Slam I in December 2024, which was also his first LAN trophy. Three more S-tier titles followed, including a recent win at PGL Wallachia Season 8 just two months ago – bringing the BetBoom Team’s trophy count to four, all of which Save- has been a part of. 

In my opinion, Save- has always been one of the most mechanically skilled position four players in the scene, and it’s been like that for a while. This guy is a monster, and I’d go as far as to say he made this team. 

Only a couple of soft support players can rival him, and we’re only talking about the super veterans like Andreas “Cr1t-” Nielsen and Samuel “Boxi” Svahn. Save- easily clears all his new blood counterparts – except for maybe Edgar “9class” Naltakian – in both mechanics and experience.

To commemorate his milestone and loyalty to the team, Save- was gifted a custom 1,000-map BetBoom jersey. He’s definitely one of the most underrated players in the scene. 

Save- 1,000 jersey
Image Credit: BetBoom Team

Grateful For the Opportunity, LGD’s New Squad is Already Hustling

With growing concerns about the esports scene, it’s important for players to treasure opportunities and make the most out of them – and that’s exactly what the former HEROIC boys are doing after LGD Gaming put their trust in them. 

Despite entering BLAST Slam 7 as one of the more middling teams, LGD Gaming is playing with no fear and tore through the group stage. The South Americans won 8 out of 11 matches, landing them the top spot in the entire bracket in such a stacked tournament. They’ve even earned themselves a fast pass to the second round of the upper bracket.

new dota 2 roster lgd gaming
Image Credit: LGD Gaming

Not only do they have to fly to Copenhagen for the rest of BLAST Slam 7, but the LGD Gaming guys are also grinding out the qualifiers for the Esports World Cup. Since they’re currently bootcamping in Europe for BLAST, they registered for the Western European qualifiers instead. 

So, they’re playing qualifiers in the middle of a million-dollar event, and got the job done with ease. They rolled everyone in the qualifiers, taking down NAVI 2-1 in the upper bracket final to secure their spot at the Esports World Cup. 

GLYPH Bomb Out of BLAST Slam But Deliver Clip-of-the-Year Contender

While LGD Gaming is thriving and headed to the playoffs at BLAST Slam, GLYPH unfortunately got the shorter end of the stick. They’re an unsponsored Southeast Asian stack that dug into their own pockets to compete at this event.

As expected, GLYPH ended up as cannon fodder and was eliminated in last place with a 2-9 record. And though they were sent packing earlier than they’d like, they at least gave us one of the best clips of the year so far. 

In their Best of 1 against Tundra Esports, now 1win, Tri “Jhocam” Kuncoro’s Rubick stole Techies’ Proximity Mines and planted a minefield around the Twin Gate, which is a pretty common strat. 

Tundra was smoked up as four, looking to take the gate to the opposite side of the map and look for a pickoff. Bozhidar “bzm” Bogdanov’s Puck was sent through first, with the rest of the team right behind him.

After completing the teleportation, bzm immediately heard Mines going off and quickly reacted with Phase Shift to dodge the potential explosions. However, the rest of the team didn’t react in time, got blown up by six mines, and died instantly. 

This is hands-down one of the funniest plays we’ve seen this year, and GLYPH will at least be remembered for that. 

Parker Runs it Back with Another Qualifier Stack

The infamous David “Parker” Nicho Flores is back with another band of brothers. This fella is notoriously known for being one of the most skilled carry players in the world, but can’t muster enough professionalism to stay on a team for more than three months.

However, he’s really proficient at forming stacks and carrying them through South American qualifiers for big events. He’s running it back with Estar Backs, where he’s currently competing for a spot in the Esports World Cup – and his chances are as high as they can get. 

parker dota 2
Image Credit: PGL

South America has two big teams: LGD Gaming and PlayTime. As we covered earlier, the former is playing in the Western European qualifier for this event, while the latter has already secured their spot via direct invite.

So, Parker and the boys only have to go through Team Nemesis as the only worthy opponent. And with how oddly good Parker is at farming qualifiers, their odds look pretty darn good. 

The Estar Backs roster is as follows:

  • David “Parker” Nicho Flores
  • Jordan “SLATEM$” Vega
  • Yheremi “payk” Arroyo
  • Rodrigo “n1ght” Cruz
  • Junior “Yadomi” Rimari

Are we going to get another repeat of the South American Rejects story? Only time – or whether Parker has finally learned his lessons – will tell.

The post Tundra leaves the scene, GLYPH’s hilarious clip, Save-‘s 1,000 maps: Dota 2’s wild week appeared first on Esports Insider.



Source link

]]>
https://gaming.vmondeika.com/tundra-leaves-the-scene-glyphs-hilarious-clip-save-s-1000-maps-dota-2s-wild-week/feed/ 0
WP Maps Pro WordPress flaw exploited to create admin accounts https://gaming.vmondeika.com/wp-maps-pro-wordpress-flaw-exploited-to-create-admin-accounts/ https://gaming.vmondeika.com/wp-maps-pro-wordpress-flaw-exploited-to-create-admin-accounts/#respond Tue, 02 Jun 2026 02:59:03 +0000 https://gaming.vmondeika.com/wp-maps-pro-wordpress-flaw-exploited-to-create-admin-accounts/ [ad_1]

TL;DR

A critical vulnerability (CVE-2026-8732, CVSS 9.8) in the WP Maps Pro WordPress plugin allows unauthenticated attackers to create admin accounts and take over sites. Wordfence blocked 2,858 exploitation attempts in 24 hours, with the flaw patched in version 6.1.1.

A critical vulnerability in WP Maps Pro, a commercial WordPress plugin with more than 15,000 sales on the Envato Market, is being actively exploited by attackers to create malicious administrator accounts on vulnerable sites. The flaw, tracked as CVE-2026-8732 with a CVSS score of 9.8, allows unauthenticated users to gain full administrative control of any WordPress installation running an unpatched version of the plugin.

Wordfence, which discovered the exploitation campaign, reported blocking 2,858 attacks targeting the vulnerability in the 24 hours prior to its disclosure. The flaw affects all versions of WP Maps Pro up to and including 6.1.0 and was patched in version 6.1.1, released on 20 May 2026. Security researcher David Brown is credited with discovering and reporting the issue.

How the exploit works

WP Maps Pro includes a “temporary access” feature designed to let the plugin’s support staff log into a customer’s site during troubleshooting. The feature exposes an AJAX action called “wpgmp_temp_access_ajax” that can create a new WordPress user with administrator privileges. The security architecture behind the feature was fundamentally flawed: the action was registered with WordPress’s “wp_ajax_nopriv_” hook, meaning it could be called by unauthenticated visitors.

The only protection was a nonce check, a token meant to prevent cross-site request forgery. But the nonce was publicly embedded into every frontend page of the site via the “wpgmp_local” JavaScript object, rendering it useless as an access control mechanism. Any visitor could read the nonce from the page source and use it to invoke the function.

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol’ founder Boris, and some questionable AI art. It’s free, every week, in your inbox. Sign up now!

An attacker who calls the endpoint with the parameter “check_temp=false” triggers the “wpgmp_temp_access_support()” function, which unconditionally creates a new WordPress user with the hardcoded role of administrator and returns a magic login URL. Visiting that URL calls “wp_set_auth_cookie()” to fully authenticate the attacker as the newly created admin. The entire chain, from unauthenticated request to full site takeover, requires no credentials, no social engineering, and no prior access.

The plugin and its reach

WP Maps Pro allows site owners to embed customisable Google Maps and OpenStreetMap views with markers, listings, and advanced location features. It is commonly used as a store locator tool for businesses that need to help users find nearby locations, view details, and get directions. The plugin is sold through the Envato Market (CodeCanyon), not through WordPress’s official plugin directory, which means updates are not distributed through the standard WordPress auto-update mechanism.

That distribution model creates a particular risk. Site owners who purchased the plugin may not receive automatic notifications about the security update, and many WordPress installations are maintained by non-technical users or agencies that do not monitor vulnerability disclosures. Unlike large-scale cybercrime infrastructure that law enforcement can target with server seizures, WordPress plugin vulnerabilities are exploited through distributed, automated scanning campaigns that are difficult to disrupt.

What site owners should do

The patch in version 6.1.1 restricts the temporary access endpoint to authenticated administrators only. Site owners running WP Maps Pro should update immediately. Those who cannot update should disable the plugin until they can apply the patch. Checking for unexpected administrator accounts in the WordPress user list is a practical first step to determine whether a site has already been compromised.

The vulnerability is a textbook example of a pattern that recurs across the WordPress ecosystem: a support or debugging feature that grants elevated privileges, protected by a security mechanism that does not actually restrict access. Vulnerability disclosure programmes and security researchers like Brown play a critical role in catching these flaws before they cause widespread damage, but the 2,858 attacks blocked in a single day demonstrate that the window between disclosure and exploitation is now measured in hours, not weeks.

[ad_2]

Source link

]]>
https://gaming.vmondeika.com/wp-maps-pro-wordpress-flaw-exploited-to-create-admin-accounts/feed/ 0