Veille CVE

Recherche « Inisev Copy & Delete Posts »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Inisev Copy & Delete Posts » ✕
  1. CVE-2026-53738 8.1 Élevée

    Inisev Copy & Delete Posts

    Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks.