Threats tagged 'ghsa-v9g8-4j77-xxgv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2025-14726The Widgets for Social Photo Feed plugin for WordPress is vulnerable to unauthorized access of data and modification Medium6.52026-05-02GCVE DatabaseCVE-2025-14726 The Widgets for Social Photo Feed WordPress plugin has a vulnerability allowing unauthorized access and modification of plugin settings via two REST API endpoints due to missing capability checks. This affects all versions up to and including 1.8. The flaw permits unauthenticated attackers to access and update plugin data. Report on CVE-2025-14726 Vulnerability CWE-200 #ghsa-v9g8-4j77-xxgv	GCVE Database	2026-05-02

Page 1 of 1