Threats Tagged 'ghsa-7cxr-gprm-hwh4'
View all threats tagged with 'ghsa-7cxr-gprm-hwh4'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-7cxr-gprm-hwh4'
Click on any threat for detailed analysis and mitigation recommendations
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those configuration values before printing them inside an inline script block on every front-end page, allowing any authenticated user, such as a subscriber, to perform Stored Cross-Site Scripting attacks against every visitor, including administrators. Join the discussion | CVE Database V5 | 10/11/2026, 09:30:25 UTC Added: 10/11/2026, 06:34:11 UTC |
Showing 1 to 1 of 1 result