Threats tagged 'ghsa-pqm3-8fwq-qwhf'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.5%	CVE-2026-74933GenieWords (WordPress plugin) · Missing Authorization High8.8EPSS 0.5%2026-09-13CVE Database V5CVE-2026-74933 The GenieWords WordPress plugin versions 1.5.27 through 1.5.34 contain missing authorization checks on certain REST API and AJAX actions. This vulnerability allows unauthenticated users to overwrite plugin configuration and inject arbitrary web scripts that execute on every front-end page, leading to high impact on confidentiality, integrity, and availability. EPSS 0.5%Vulnerability CWE-862 #ghsa-pqm3-8fwq-qwhf	CVE Database V5	2026-09-13

Page 1 of 1