2 matches found
EUVD-2025-203228
The AnnunciFunebri Impresa plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the annfuresetoptions function in all versions up to, and including, 4.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and...
5.3CVSS4.6AI score0.00293EPSS
SaveExploits0References4
CVE-2025-14447: Missing Authorization
The AnnunciFunebri Impresa plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the annfuresetoptions function in all versions up to, and including, 4.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and...
4.3CVSS5.7AI score0.00293EPSS
SaveExploits0References1
20