Threats tagged 'ghsa-q9xx-25qx-rvv7'

A missing authorization vulnerability exists in WP User Manager versions up to 2.10.4. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized information disclosure. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact with network attack vector and no privileges or user interaction required.