Threats tagged 'ghsa-qh3p-qcm6-6w26'

A missing authorization vulnerability exists in Liquid Web / StellarWP Event Tickets plugin (up to version 5.30.2) that allows exploitation of incorrectly configured access control security levels. This flaw can lead to unauthorized modification of data or actions without proper permissions. The vulnerability has a medium severity rating with a CVSS score of 4.3.