exploitDog

GHSA-2898-g742-r2p3

Опубликовано: 17 июн. 2025

Источник: github

Github: Не прошло ревью

CVSS3: 5.3

Описание

Missing Authorization vulnerability in WPExperts.io myCred allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects myCred: from n/a through 2.9.4.2.

Missing Authorization vulnerability in WPExperts.io myCred allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects myCred: from n/a through 2.9.4.2.

Ссылки

EPSS

Процентиль: 16%

0.00051

Низкий

5.3 Medium

CVSS3

CVE ID

Дефекты

CWE-862

Связанные уязвимости

CVE-2025-49872

CVSS3: 5.3

nvd

5 месяцев назад

Missing Authorization vulnerability in WPExperts.io myCred allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects myCred: from n/a through 2.9.4.2.

EPSS

Процентиль: 16%

0.00051

Низкий

5.3 Medium

CVSS3

CVE ID

Дефекты

CWE-862