Threats tagged 'ghsa-fhr8-5rh4-3948'

1 threat

Threats tagged 'ghsa-fhr8-5rh4-3948'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.3%	CVE-2026-104680Envira Gallery · Improper Privilege Management High7.2EPSS 0.3%2026-10-11CVE Database V5CVE-2026-104680 The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does not restrict the installation to its own curated list, allowing a Multisite subsite Administrator to install an arbitrary WordPress.org-published Envira Gallery WordPress plugin before 1.16.2 into the network-shared Envira Gallery WordPress plugin before 1.16.2 directory, a privilege Multisite reserves for the network Super Admin. EPSS 0.3%Vulnerability #cwe-269 #ghsa-fhr8-5rh4-3948	CVE Database V5	2026-10-11

Showing 1–1 of 1 result