Threats tagged 'ghsa-hhx4-fq39-gx2j'

A missing authorization vulnerability exists in the wphocus My auctions allegro my-auctions-allegro-free-edition plugin, affecting versions up to 4.0.3. This flaw allows attackers with limited privileges to bypass access controls, potentially leading to unauthorized information disclosure or modification. The vulnerability is identified as CWE-862 and has a CVSS v3.1 base score of 5.4 (medium severity). No patch or official remediation has been indicated in the available data.