Threats tagged 'ghsa-qjgh-5372-g9qg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2026-14941Customer Reviews for WooCommerce (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2026-08-10CVE Database V5CVE-2026-14941 The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative settings handlers, update Customer Reviews for WooCommerce WordPress plugin before 5.116.0 options, and disclose store configuration. EPSS 0.2%Vulnerability CWE-862 #ghsa-qjgh-5372-g9qg	CVE Database V5	2026-08-10

Page 1 of 1