Threats tagged 'ghsa-99pj-8225-q39g'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-12582The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check Medium4.3EPSS 0.2%2025-11-05GCVE DatabaseCVE-2025-12582 The Features plugin for WordPress up to version 0.0.2 contains a vulnerability where a missing capability check on the 'features_revert_option' AJAX endpoint allows authenticated users with Subscriber-level access or higher to revert options without proper authorization. This vulnerability can lead to unauthorized modification of plugin data. EPSS 0.2%Report on CVE-2025-12582 Vulnerability CWE-862 #ghsa-99pj-8225-q39g	GCVE Database	2025-11-05

Page 1 of 1