Threats tagged 'ghsa-f95q-5g64-x846'

A missing authorization vulnerability in the weDevs WP ERP plugin (up to version 1.17.10) allows exploitation of incorrectly configured access control security levels. This flaw could permit users with limited privileges to access certain functionality or data without proper authorization. The vulnerability has a CVSS score of 4.3, indicating a medium severity impact primarily affecting confidentiality. No public exploits or patches are currently documented.