Threats tagged 'ghsa-fmm2-vv76-h6wg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-14857WP Crowdfunding · Insecure Direct Object Reference Medium4.3EPSS 0.3%2026-08-12CVE Database V5CVE-2026-14857 The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update history to be modified and a notification email sent to its backers, allowing any authenticated users such as Subscribers to alter other users' campaigns. EPSS 0.3%Vulnerability CWE-639 #ghsa-fmm2-vv76-h6wg	CVE Database V5	2026-08-12

Page 1 of 1