Aller au contenu
Se connecter
7.5 Élevée

CVE-2026-87839 The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of…

Description

The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of the object being removed, in an AJAX action available to unauthenticated users, allowing them to permanently delete arbitrary comments on the site.

Produits et versions touchés

Produit Versions touchées Corrigé en
Tripzzy 1.1 1.1.8 → < 1.5.1 1.5.1

Autres CVE de Tripzzy

Les 2 CVE de Tripzzy →
CVE-2026-87840 The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on its administrative… 5.3 Moyenne
Suivre cette CVE