Threats tagged 'ghsa-m8mq-x2gc-8xcm'

CTX Feed Pro WordPress plugin versions up to and including 7.6.12 contain a code injection vulnerability due to improper input validation on the 'Feed Config' field. This field is passed directly to the eval() function, allowing authenticated users with Administrator-level privileges or higher to execute arbitrary PHP code on the server. The vulnerability has a high severity rating with a CVSS score of 7.2.