Threats tagged 'ghsa-25vq-xhx7-64q5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2025-12038The Folderly plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability Medium4.32025-11-01GCVE DatabaseCVE-2025-12038 The Folderly plugin for WordPress contains a vulnerability in its REST API endpoint /wp-json/folderly/v1/config/clear-all-data that allows authenticated users with Author-level access or higher to clear all data such as terms and categories. This is due to an insufficient capability check in all versions up to and including 0.3. Report on CVE-2025-12038 Vulnerability CWE-863 #ghsa-25vq-xhx7-64q5	GCVE Database	2025-11-01

Page 1 of 1