Threats tagged 'ghsa-78p4-p67c-wwv7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-110963The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to High2026-11-08GCVE DatabaseCVE-2026-110963 The Userplace WordPress plugin versions up to 1.2.0 contain a vulnerability where an AJAX action accessible to unauthenticated users lacks proper authorization checks and exposes the nonce protecting it. This flaw allows unauthenticated attackers to create administrator accounts or modify site options, potentially resulting in full site takeover. Report on CVE-2026-110963 Vulnerability #ghsa-78p4-p67c-wwv7	GCVE Database	2026-11-08

Page 1 of 1