Threats tagged 'ghsa-9rg9-xfxx-rmvr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123666The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.2 does not check that a user may delete the High2026-11-11GCVE DatabaseCVE-2026-123666 The Photo Engine WordPress plugin versions before 6.6.2 allow users with the Author role and above to delete media synced by other users, including administrators, without proper permission checks. This vulnerability enables unauthorized permanent deletion of media within collections. Report on CVE-2026-123666 Vulnerability #ghsa-9rg9-xfxx-rmvr	GCVE Database	2026-11-11

Page 1 of 1