Threats tagged 'ghsa-jchc-3px4-v985'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-18200FoodBoxBooker (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.3%2026-08-10CVE Database V5CVE-2026-18200 The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that the user account being updated belongs to the user making the request, allowing authenticated users, with Subscriber-level access and above, to modify the profile details of arbitrary users, including administrators. EPSS 0.3%Vulnerability CWE-639 #ghsa-jchc-3px4-v985	CVE Database V5	2026-08-10

Page 1 of 1