Lucene search
+L

2 matches found

NVD
NVD
•added 2026/09/14 7:17 p.m.•13 views

CVE-2026-89023

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer records, delete arbitrary offers by numer...

8.8CVSS0.00385EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•3 views

CVE-2026-89023: Missing Authorization

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer records, delete arbitrary offers by numer...

8.8CVSS5.9AI score0.00385EPSS
SaveExploits0References2
Rows per page
Query Builder