Threats tagged 'ghsa-mjm5-cr6q-x25r'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2025-12157The Simple User Capabilities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing Medium5.32025-11-04GCVE DatabaseCVE-2025-12157 The Simple User Capabilities plugin for WordPress up to and including version 1.0 contains a vulnerability that allows unauthenticated attackers to reset any user's capabilities. This occurs due to a missing capability check on the 'wp_ajax_nopriv_reset_capability' AJAX endpoint, enabling unauthorized modification of user data. Report on CVE-2025-12157 Vulnerability CWE-862 #ghsa-mjm5-cr6q-x25r	GCVE Database	2025-11-04

Page 1 of 1