Threats tagged 'ghsa-v79r-g77x-46wf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2026-116610The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.20.1 Medium4.32026-10-28GCVE DatabaseCVE-2026-116610 The Clean Login WordPress plugin versions up to and including 1.20.1 have a missing authorization vulnerability. This flaw allows authenticated users with Contributor-level access or higher to overwrite certain plugin options by embedding shortcodes in posts they author. The vulnerability arises from a missing capability check in a function triggered on post save. Report on CVE-2026-116610 Vulnerability CWE-862 #ghsa-v79r-g77x-46wf	GCVE Database	2026-10-28

Page 1 of 1