Threats tagged 'ghsa-pgwx-rp76-jv29'

A missing authorization vulnerability exists in WC Lovers WCFM Marketplace (wc-multivendor-marketplace) up to version 3.8.2. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a high severity rating with a CVSS score of 7.5. No patch or remediation information is currently provided.