Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/14 12:00 a.m.•6 views

CVE-2025-6792: Missing Authentication for Critical Function

The One to one user Chat by WPGuppy plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/guppylite/v2/channel-authorize rest endpoint in all versions up to, and including, 1.1.4. This makes it possible for unauthenticated attackers to...

5.3CVSS5.8AI score0.00387EPSS
SaveExploits0References1
Rows per page
Query Builder