Threats tagged 'ghsa-f89g-x83g-732v'

1 threat

Threats tagged 'ghsa-f89g-x83g-732v'
Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-111978GiveWP · Path Traversal High2026-10-25CVE Database V5CVE-2026-111978 The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from disk, allowing users with a high-privilege custom role to perform path traversal, disclose the contents of JSON-parseable files anywhere on the server, and overwrite the GiveWP WordPress plugin before 4.19.0.1's stored configuration. Vulnerability #cwe-22 #ghsa-f89g-x83g-732v	CVE Database V5	2026-10-25

Showing 1–1 of 1 result