Threats tagged 'ghsa-4qqw-wh2v-hr89'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-115237The Grand Job WordPress plugin through 1.2.1 does not correctly verify the password reset code before updating a High2026-11-09GCVE DatabaseCVE-2026-115237 The Grand Job WordPress plugin versions up to 1.2.1 contain a vulnerability where the password reset code is not properly verified before allowing a password update. This flaw enables unauthenticated attackers to reset passwords for arbitrary accounts, including administrator accounts, potentially leading to full site takeover. Report on CVE-2026-115237 Vulnerability #ghsa-4qqw-wh2v-hr89	GCVE Database	2026-11-09

Page 1 of 1