Threats tagged 'ghsa-gf78-3gg4-868g'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-13177Eventin (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.3%2026-08-12CVE Database V5CVE-2026-13177 The Eventin WordPress plugin before 4.1.20 does not properly restrict access to individual order records, allowing users with contributor-level access and above to read other customers' order data including personal information by iterating order identifiers. EPSS 0.3%Vulnerability CWE-639 #ghsa-gf78-3gg4-868g	CVE Database V5	2026-08-12

Page 1 of 1