Threats tagged 'ghsa-xqw2-vwjg-w56m'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-87842Zonify (WordPress plugin) · Information Exposure High7.5EPSS 0.5%2026-09-12CVE Database V5CVE-2026-87842 The Zonify WordPress plugin before 1.0.5 does not perform any capability or authentication check before returning the site's stored account login token, allowing unauthenticated attackers to retrieve it and authenticate to the site owner's linked service account. EPSS 0.5%Vulnerability CWE-200 #ghsa-xqw2-vwjg-w56m	CVE Database V5	2026-09-12

Page 1 of 1