PT-2025-23375 · WordPress · Proforti

Name of the Vulnerable Software and Affected Versions: Proforti plugin for WordPress versions 2.0.6.0 through 2.1.1.3 Description: The issue is related to a missing capability check on the "stocktend object" endpoint. This allows unauthenticated attackers to trigger the save object as user functi...