unknown ichart vulnerabilities, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 8.8CVE-2026-121998EPSS 0.3%
The iChart WordPress plugin before 2.2.4 does not perform capability or ownership checks in several of its AJAX actions, relying only on a nonce that any logged-in user can obtain, allowing users with a role as low as Subscriber to read, …