Threats tagged 'ghsa-xgf9-46hc-5c98'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-14834Mailgun for WordPress · Improper Access Control Medium6.5EPSS 0.3%2026-07-31CVE Database V5CVE-2026-14834 Mailgun for WordPress versions prior to 2.2.1 contain an improper access control vulnerability. The plugin fails to perform capability or nonce checks on an unauthenticated AJAX action that adds subscribers to mailing lists. This allows unauthenticated attackers to add arbitrary email addresses to the site owner's configured mailing lists using the owner's stored API credentials. EPSS 0.3%Vulnerability CWE-284 #ghsa-xgf9-46hc-5c98	CVE Database V5	2026-07-31

Page 1 of 1