Threats tagged 'ghsa-xxh9-x8mr-vqr4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-106015The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification High2026-11-08GCVE DatabaseCVE-2026-106015 The Ecommerce Affiliate WordPress plugin up to version 1.0.0 contains a vulnerability that allows unauthenticated attackers to issue and verify one-time passwords without restriction. This flaw enables attackers to take over any user account, including administrator accounts, due to the lack of verification limits and ownership checks. Report on CVE-2026-106015 Vulnerability #ghsa-xxh9-x8mr-vqr4	GCVE Database	2026-11-08

Page 1 of 1