Threats tagged 'ghsa-cgwq-34w7-7rpv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-121492The Fiber Admin WordPress plugin before 4.0.1 does not have authorisation checks in some of its AJAX actions, allowing Medium2026-11-07GCVE DatabaseCVE-2026-121492 The Fiber Admin WordPress plugin versions before 4.0.1 lack authorization checks in certain AJAX actions. This vulnerability allows unauthenticated users to reorder arbitrary posts, including drafts, private posts, and navigation menu items, as well as reorder taxonomy terms when term ordering is enabled. Report on CVE-2026-121492 Vulnerability #ghsa-cgwq-34w7-7rpv	GCVE Database	2026-11-07

Page 1 of 1