Threats tagged 'ghsa-rgr9-g879-r5wm'

1 threat

Threats tagged 'ghsa-rgr9-g879-r5wm'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-97332User Private Files · Improper Access Control Medium5.3EPSS 0.2%2026-10-04CVE Database V5CVE-2026-97332 A vulnerability in the User Private Files WordPress plugin before version 2.2.0 allows unauthenticated users on multisite installations to access other users' private files. This occurs because the rewrite rule that enforces access control is bypassed, exposing private files directly. The issue is classified as improper access control (CWE-284). EPSS 0.2%Vulnerability #cwe-284 #ghsa-rgr9-g879-r5wm	CVE Database V5	2026-10-04

Showing 1–1 of 1 result