Threats tagged 'ghsa-hf6x-3cff-j9f3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.2	EPSS 0.2%	CVE-2026-84025BEAR (WordPress plugin) · Insecure Direct Object Reference Low2.2EPSS 0.2%2026-09-12CVE Database V5CVE-2026-84025 The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and private product metadata. EPSS 0.2%Vulnerability CWE-639 #ghsa-hf6x-3cff-j9f3	CVE Database V5	2026-09-12

Page 1 of 1