Threats tagged 'ghsa-5m5x-66vw-r2rp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2025-11007The CE21 Suite plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability Critical9.82025-11-04GCVE DatabaseCVE-2025-11007 The CE21 Suite plugin for WordPress versions 2.2.1 through 2.3.1 contains a vulnerability due to a missing capability check in an AJAX action. This flaw allows unauthenticated attackers to update the plugin's API settings, including a secret key used for authentication, enabling them to create new administrator accounts on the affected site. Report on CVE-2025-11007 Vulnerability CWE-306 #ghsa-5m5x-66vw-r2rp	GCVE Database	2025-11-04

Page 1 of 1