Lucene search
+L

7 matches found

NVD
NVD
added yesterday5 views

CVE-2026-13432

The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access or higher to deactivate the ThumbPress WordPress plugin before 6.2.2, disrupting the site's image-handling functionality...

5.4CVSS0.00132EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-13432

The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access or higher to deactivate the ThumbPress WordPress plugin before 6.2.2, disrupting the site's image-handling functionality...

5.3AI score0.00132EPSS
Exploits0References1
CVE
CVE
added yesterday11 views

CVE-2026-13432

ThumbPress WordPress plugin prior to version 6.2.2 is affected. The root cause is a missing capability check on one of its AJAX actions, enabling authenticated users with subscriber-level access or higher to deactivate the plugin and disrupt image-handling functionality. Impact is disruption of i...

5.4CVSS5.3AI score0.00132EPSS
Exploits0References1
EUVD
EUVD
added yesterday8 views

EUVD-2026-45891

The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access or higher to deactivate the ThumbPress WordPress plugin before 6.2.2, disrupting the site's image-handling functionality...

5.4CVSS5.3AI score0.00132EPSS
Exploits0References1
Cvelist
Cvelist
added yesterday27 views

CVE-2026-13432 ThumbPress < 6.2.2 - Subscriber+ Plugin Deactivation

The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access or higher to deactivate the ThumbPress WordPress plugin before 6.2.2, disrupting the site's image-handling functionality...

0.00132EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/07/01 4:55 p.m.42 views

CVE-2026-57720 WordPress ThumbPress plugin <= 6.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Codexpert Inc ThumbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ThumbPress: from n/a through 6.3.2...

4.3CVSS0.00203EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/07/01 4:54 p.m.6 views

WordPress ThumbPress plugin <= 6.3.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Denver Jackson in WordPress Plugin ThumbPress versions = 6.3.2...

4.3CVSS5.8AI score0.00203EPSS
Exploits0Affected Software1
Rows per page
Query Builder