Threats tagged 'ghsa-p922-mx52-2wrj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	3.7	CVE-2026-108685The WP Post Author WordPress plugin before 4.2.0 does not check that the account was created before updating its Low3.72026-10-29GCVE DatabaseCVE-2026-108685 The WP Post Author WordPress plugin versions prior to 4.2.0 contain a vulnerability where the plugin does not verify that a user account was created before allowing profile updates during front-end registration. This flaw permits unauthenticated users to overwrite the display name, nickname, and website fields of the first user account, which is typically the administrator account. Report on CVE-2026-108685 Vulnerability #ghsa-p922-mx52-2wrj	GCVE Database	2026-10-29

Page 1 of 1