Threats tagged 'ghsa-jxrw-x44m-c9mq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.7	EPSS 0.3%	CVE-2026-16276Classified Listing (WordPress plugin) · Missing Authorization Low2.7EPSS 0.3%2026-08-03CVE Database V5CVE-2026-16276 The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers. EPSS 0.3%Vulnerability CWE-862 #ghsa-jxrw-x44m-c9mq	CVE Database V5	2026-08-03

Page 1 of 1