Threats tagged 'ghsa-258v-5wmv-8454'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.7	EPSS 0.3%	CVE-2026-78150Smart Post (WordPress plugin) · Insecure Direct Object Reference Low2.7EPSS 0.3%2026-09-05CVE Database V5CVE-2026-78150 The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and above to copy any private or password protected post into a draft of their own and read its content and metadata. EPSS 0.3%Vulnerability CWE-639 #ghsa-258v-5wmv-8454	CVE Database V5	2026-09-05

Page 1 of 1