Threats tagged 'ghsa-hmvr-4f83-5cp7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-122003The Abilities Bridge WordPress plugin before 1.4.2 does not require a valid nonce before re-authenticating a REST API High2026-11-12GCVE DatabaseCVE-2026-122003 The Abilities Bridge WordPress plugin versions prior to 1.4.2 lack nonce validation when re-authenticating REST API requests from logged-in session cookies. This vulnerability enables attackers to perform Cross-Site Request Forgery (CSRF) attacks that can cause a logged-in administrator to execute arbitrary REST API actions, including creating new administrator accounts and taking over the site. Report on CVE-2026-122003 Vulnerability #ghsa-hmvr-4f83-5cp7	GCVE Database	2026-11-12

Page 1 of 1