CyberRota
← Ana sayfaya dön

CVE-2026-14843

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-31T07:16:25.420 · Çekilme zamanı: 2026-07-31T12:07:47.124877+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-14843
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an unauthenticated data-change request, relying only on a public nonce with no per-record token or ownership check, allowing unauthenticated attackers to overwrite the personal data of any person record.