Threats tagged 'ghsa-6ch9-px9g-8jxj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	10.0	CVE-2026-115252The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks Critical10.02026-11-09GCVE DatabaseCVE-2026-115252 The Confection WordPress Cable plugin versions 0.4.0 through 0.4.7 lack capability and nonce checks when saving settings, allowing unauthenticated users to write arbitrary PHP code to a file that the plugin serves. This enables remote code execution on the server without authentication. Report on CVE-2026-115252 Vulnerability #ghsa-6ch9-px9g-8jxj	GCVE Database	2026-11-09

Page 1 of 1