Threats tagged 'ghsa-4rv8-269g-jgjf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2025-11455The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability Medium4.32026-10-31GCVE DatabaseCVE-2025-11455 The Perfect Images WordPress plugin up to version 7.2.0 has a vulnerability due to a missing capability check on a REST API endpoint. This flaw allows authenticated users with Author-level access or higher to modify files they do not own via the /wp-json/wp-retina-2x/v1/replace API. Report on CVE-2025-11455 Vulnerability CWE-862 #ghsa-4rv8-269g-jgjf	GCVE Database	2026-10-31

Page 1 of 1