Threats tagged 'ghsa-frjm-xwcq-24jh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123131The GemBooking WordPress plugin before 1.7.1 does not properly verify that a REST request is addressed to its own High2026-11-09GCVE DatabaseCVE-2026-123131 The GemBooking WordPress plugin versions before 1.7.1 contain a vulnerability where REST requests are not properly verified to belong to the plugin's own routes. This flaw allows users assigned the Staff role to temporarily gain administrative capabilities, enabling them to delete arbitrary posts and modify site settings. Report on CVE-2026-123131 Vulnerability #ghsa-frjm-xwcq-24jh	GCVE Database	2026-11-09

Page 1 of 1