Threats tagged 'ghsa-hqj9-3pgq-546r'

The Media Library Assistant WordPress plugin versions before 3.44 have a vulnerability where the plugin does not verify if the requesting user has permission to view a post before revealing the taxonomy terms assigned to it. This flaw allows any authenticated user, including low-privileged roles such as subscribers, to discover the term assignments of private attachments and posts.