Threats tagged 'ghsa-vrg4-ffx9-cfhg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-16256POUCO Import Users (WordPress plugin) · Improper Privilege Management Critical9.8EPSS 0.5%2026-08-02CVE Database V5CVE-2026-16256 The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce checks on AJAX actions available to unauthenticated users that create and update WordPress accounts, and it trusts an attacker-supplied role value, allowing unauthenticated attackers to create a new administrator account and take over the site. EPSS 0.5%Vulnerability CWE-269 #ghsa-vrg4-ffx9-cfhg	CVE Database V5	2026-08-02

Page 1 of 1