Threats tagged 'ghsa-j969-3gcr-g846'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-14859WP Crowdfunding · Improper Access Control Medium4.3EPSS 0.3%2026-08-12CVE Database V5CVE-2026-14859 The WP Crowdfunding WordPress plugin before 2.2.1 does not check the campaign-submission capability in one of its AJAX actions, allowing any authenticated users such as Subscribers to create crowdfunding campaign posts despite not being granted that permission. EPSS 0.3%Vulnerability CWE-284 #ghsa-j969-3gcr-g846	CVE Database V5	2026-08-12

Page 1 of 1