Threats tagged 'ghsa-x8qc-qp9g-qq8j'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-115205The AZEXO Store Locator WordPress plugin through 1.4 does not have a capability check or any authorization control High2026-11-03GCVE DatabaseCVE-2026-115205 The AZEXO Store Locator WordPress plugin up to version 1.4 lacks authorization controls for deleting posts. This allows any authenticated user, including those with low privileges such as subscribers, to delete arbitrary posts and pages. Report on CVE-2026-115205 Vulnerability #ghsa-x8qc-qp9g-qq8j	GCVE Database	2026-11-03

Page 1 of 1