Threats tagged 'ghsa-8xjg-cmc9-35px'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-111577The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check on its SMTP High2026-10-28GCVE DatabaseCVE-2026-111577 The GoSMTP WordPress plugin versions before 1.2.5 lack an authorization check on the SMTP configuration page, allowing users with roles below administrator to modify outbound mail settings. This vulnerability can lead to administrator account takeover. Report on CVE-2026-111577 Vulnerability #ghsa-8xjg-cmc9-35px	GCVE Database	2026-10-28

Page 1 of 1