Threats tagged 'ghsa-gm98-p9q7-cg6p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-15048Geeky Bot (WordPress plugin) · Information Exposure High7.5EPSS 0.4%2026-07-31CVE Database V5CVE-2026-15048 CVE-2026-15048 is a high severity information exposure vulnerability in the Geeky Bot WordPress plugin before version 1.2.8. The plugin fails to perform authorization checks on one of its AJAX actions, allowing unauthenticated users to access chat-history session metadata. This metadata includes sensitive details such as WordPress usernames, user IDs, and timestamps. EPSS 0.4%Vulnerability CWE-200 #ghsa-gm98-p9q7-cg6p	CVE Database V5	2026-07-31

Page 1 of 1