Threats tagged 'ghsa-vp47-47vc-c5gf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-113584The placester WordPress plugin through 1.4.3 does not perform any capability, nonce or ownership check on an AJAX High2026-11-06GCVE DatabaseCVE-2026-113584 The placester WordPress plugin versions through 1.4.3 lack proper capability, nonce, and ownership checks on an AJAX action that updates account details. This flaw allows unauthenticated attackers to overwrite any user's email address, including administrators, enabling account takeover via the password-reset process. Report on CVE-2026-113584 Vulnerability #ghsa-vp47-47vc-c5gf	GCVE Database	2026-11-06

Page 1 of 1