Threats tagged 'ghsa-p54f-4qj5-25h3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-115257The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored High2026-11-04GCVE DatabaseCVE-2026-115257 The WP Roster WordPress plugin versions prior to 2.36 lack capability and nonce checks when writing stored roster data. This flaw allows unauthenticated attackers to overwrite, wipe, or restore any roster content. Report on CVE-2026-115257 Vulnerability #ghsa-p54f-4qj5-25h3	GCVE Database	2026-11-04

Page 1 of 1