Recherche « Unknown Spin Wheel »
1 CVE
Critique 0
Élevée 0
Moyenne 1
Faible 0
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Unknown Spin Wheel » ✕
-
CVE-2026-106031 6.5 Moyenne
Unknown Spin Wheel
The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a legitimate spin before returning and consuming a configured prize coupon, allowing unauthenticated users to disclose and drain the stored coupon codes of any campaign, including unpublished ones.