Threats tagged 'ghsa-jw8h-m67w-2j3v'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-117487The Flatsome WordPress theme before 3.20.13 does not perform a capability or nonce check on an AJAX action available High2026-11-14GCVE DatabaseCVE-2026-117487 The Flatsome WordPress theme versions prior to 3.20.13 contain a vulnerability where an AJAX action accessible to unauthenticated users lacks capability and nonce checks. This flaw allows unauthorized users to retrieve content from unpublished posts, including drafts and pending posts, by specifying post IDs. Report on CVE-2026-117487 Vulnerability #ghsa-jw8h-m67w-2j3v	GCVE Database	2026-11-14

Page 1 of 1