Threats tagged 'ghsa-vmmh-jvfw-c7h2'

The Fusion Page Builder WordPress plugin versions prior to 1.7.1 contain a vulnerability where the plugin does not verify ownership of content before moving it to the trash. This flaw allows users with Contributor-level roles to trash arbitrary posts and pages or permanently delete them if the trash feature is disabled.