Threats Tagged 'cve-2026-107887'
View all threats tagged with 'cve-2026-107887'. Filter and sort to focus on specific types of threats.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-107887'
Click on any threat for detailed analysis and mitigation recommendations
CVE Database V5 · 10/24/2026, 06:00:17 UTC 0 The Advanced Twenty Seventeen WordPress plugin up to version 1.3.1 has a missing authorization vulnerability that allows any authenticated user, including low-privilege roles like subscribers, to activate its bundled child theme site-wide. This action lacks capability and nonce checks, enabling unauthorized theme switching. Additionally, the vulnerability can be exploited via Cross-Site Request Forgery (CSRF) to trigger the action against any logged-in user, including administrators. Join the discussion | CVE Database V5 | 10/24/2026, 06:00:17 UTC Added: 10/24/2026, 06:20:22 UTC |
Showing 1 to 1 of 1 result
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console → Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.