Threats tagged 'ghsa-x2ww-v6rp-cf3p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.5%	CVE-2026-14237vitepos (WordPress plugin) · Improper Privilege Management High7.2EPSS 0.5%2026-08-10CVE Database V5CVE-2026-14237 The vitepos WordPress plugin before 3.6.0, Vitepos WordPress plugin before 3.5.0 do not perform a per-target authorization check in their point-of-sale password-reset API and grant the custom Outlet Manager role an over-broad password-reset capability by default, allowing an Outlet Manager to reset any user's password, including an administrator's, and take over the account. EPSS 0.5%Vulnerability CWE-269 #ghsa-x2ww-v6rp-cf3p	CVE Database V5	2026-08-10

Page 1 of 1