Threats tagged 'ghsa-c6mq-jmqr-fj42'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-12360The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due Medium4.3EPSS 0.2%2025-11-06GCVE DatabaseCVE-2025-12360 The Better Find and Replace – AI-Powered Suggestions plugin for WordPress contains a vulnerability in all versions up to and including 1.7.7. The flaw is due to a missing capability check on the rtafar_ajax() function, allowing authenticated users with Subscriber-level access to misuse the OpenAI API key. This unauthorized API usage can lead to quota consumption and potential costs without proper authorization. EPSS 0.2%Report on CVE-2025-12360 Vulnerability CWE-285 #ghsa-c6mq-jmqr-fj42	GCVE Database	2025-11-06

Page 1 of 1