Reactpress
Monthly
Broken access control in the ReactPress WordPress plugin (versions up to and including 3.4.0) permits subscriber-level authenticated users to perform privileged operations that should be restricted to higher-capability roles. The CVSS vector (S:C) indicates the flaw's impact extends beyond the plugin's own trust boundary, potentially affecting broader WordPress site resources such as content or configuration. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Broken access control in the ReactPress WordPress plugin (versions up to and including 3.4.0) permits subscriber-level authenticated users to perform privileged operations that should be restricted to higher-capability roles. The CVSS vector (S:C) indicates the flaw's impact extends beyond the plugin's own trust boundary, potentially affecting broader WordPress site resources such as content or configuration. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.