Threats tagged 'ghsa-7pg5-q6xp-hc6p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123092The WP Remote Users Sync WordPress plugin before 2.3.0 does not restrict which user metadata keys may be written High2026-11-12GCVE DatabaseCVE-2026-123092 The WP Remote Users Sync WordPress plugin versions before 2.3.0 allow unrestricted writing of user metadata keys via incoming synchronization requests. This flaw enables a site with the shared synchronization keys to modify the capabilities of any existing user account, potentially escalating privileges to administrator. Report on CVE-2026-123092 Vulnerability #ghsa-7pg5-q6xp-hc6p	GCVE Database	2026-11-12

Page 1 of 1