Threats tagged 'ghsa-25m3-39mc-92qp'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-16608Download Monitor (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2026-08-08CVE Database V5CVE-2026-16608 The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging AJAX actions, and exposes the nonce protecting it to unauthenticated visitors, allowing unauthenticated users to inject arbitrary download log entries and inflate a site's download statistics. EPSS 0.3%Vulnerability CWE-862 #ghsa-25m3-39mc-92qp	CVE Database V5	2026-08-08

Page 1 of 1