Threats tagged 'ghsa-96pg-7j2j-vmjm'

1 threat

Threats tagged 'ghsa-96pg-7j2j-vmjm'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.2%	CVE-2026-96532Testimonials Widget · Missing Authorization High7.5EPSS 0.2%2026-09-26CVE Database V5CVE-2026-96532 The Testimonials Widget WordPress plugin up to version 4.0.4 has a missing authorization vulnerability. This flaw allows unauthenticated users to submit or modify testimonials via the front-end form without proper capability or ownership checks. Attackers can create or overwrite posts, including changing titles, content, and authorship. EPSS 0.2%Vulnerability #cwe-862 #ghsa-96pg-7j2j-vmjm	CVE Database V5	2026-09-26

Showing 1–1 of 1 result