Threats tagged 'ghsa-v973-hgc6-wrfw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123044The ContentPen WordPress plugin before 1.1.1 discloses its REST API key to unauthenticated users, who can then use it High2026-11-12GCVE DatabaseCVE-2026-123044 The ContentPen WordPress plugin versions before 1.1.1 expose their REST API key to unauthenticated users. This exposure allows attackers to create posts containing unfiltered JavaScript, resulting in stored cross-site scripting (XSS) that executes in the browsers of any visitors, including administrators. Report on CVE-2026-123044 Vulnerability #ghsa-v973-hgc6-wrfw	GCVE Database	2026-11-12

Page 1 of 1