Threats tagged 'ghsa-38w6-cwxx-3m7p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-115259The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.0 does not have proper authorization checks High2026-10-29GCVE DatabaseCVE-2026-115259 The Photo Engine WordPress plugin versions up to 6.5.8 lack proper authorization checks on a REST API route used to update post data. This vulnerability allows authenticated users with Author-level access or higher to modify titles, content, excerpts, and other fields of arbitrary posts, pages, and attachments, including those owned by other users. The issue is fixed in version 6.6.0. Report on CVE-2026-115259 Vulnerability #ghsa-38w6-cwxx-3m7p	GCVE Database	2026-10-29

Page 1 of 1