Threats tagged 'ghsa-2mx4-g8fr-m5m8'

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress contains a limited code injection vulnerability in all versions up to and including 1.7.7. This flaw arises from insufficient input validation in the 'rtafar_ajax' function, allowing authenticated users with Subscriber-level access or higher to invoke arbitrary plugin functions and execute code within those functions.