Threats tagged 'ghsa-6m7v-g5wq-gghp'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-16300ChamaWP (WordPress plugin) · Missing Authorization Critical9.8EPSS 0.5%2026-08-03CVE Database V5CVE-2026-16300 CVE-2026-16300 is a critical vulnerability in the ChamaWP WordPress plugin versions prior to 1.0.13. It involves missing authorization checks on password reset requests, allowing unauthenticated attackers to reset passwords of arbitrary users, including administrators. This flaw can lead to a full site takeover if exploited. EPSS 0.5%Vulnerability CWE-862 #ghsa-6m7v-g5wq-gghp	CVE Database V5	2026-08-03

Page 1 of 1