Threats tagged 'ghsa-hvvh-f79h-xxpp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-112355The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows High8.72026-10-27GCVE DatabaseCVE-2026-112355 The MembershipWorks WordPress plugin versions prior to 6.17 have an information disclosure vulnerability. This flaw allows unauthenticated attackers to access member-only content via the WordPress REST API. The vulnerability exists because the content protection filter is applied only during normal front-end requests and not during REST API requests, enabling bypass of content restrictions. Report on CVE-2026-112355 Vulnerability CWE-862 #ghsa-hvvh-f79h-xxpp	GCVE Database	2026-10-27

Page 1 of 1