Threats tagged 'ghsa-x37j-q2h4-mfmw'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-18035The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests Medium5.3EPSS 0.3%2026-08-12GCVE DatabaseCVE-2026-18035 The User Access Manager WordPress plugin versions prior to 2.3.15 fail to enforce access restrictions on REST API requests. This vulnerability allows unauthenticated attackers to read content from posts, pages, and custom post types that are intended to be restricted to specific user groups. EPSS 0.3%Report on CVE-2026-18035 Vulnerability CWE-862 #ghsa-x37j-q2h4-mfmw	GCVE Database	2026-08-12

Page 1 of 1