Threats tagged 'ghsa-qr6f-qp3w-9j3f'

The Streamit WordPress plugin versions before 1.3.10 contain a vulnerability where an unauthenticated AJAX route lacks authorization and nonce verification. This flaw allows attackers to invoke arbitrary PHP functions with attacker-controlled arguments, potentially enabling privilege escalation and remote code execution.