Threats tagged 'ghsa-vp68-5q7h-58f3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2025-12041The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability Medium5.32025-10-31GCVE DatabaseCVE-2025-12041 The ERI File Library plugin for WordPress contains a vulnerability that allows unauthorized data access due to a missing capability check on the 'erifl_file' AJAX action. This affects all versions up to and including 1.1.0, enabling unauthenticated attackers to download files intended for restricted user roles. Report on CVE-2025-12041 Vulnerability CWE-862 #ghsa-vp68-5q7h-58f3	GCVE Database	2025-10-31

Page 1 of 1