TI-2024-01026 CVE-2024-1108 · GHSA-hqp2-6j35-rqp5Plugin Groups <= 2.0.6 - Missing Authorization to Unauthenticated Denial of ServicePriority MEDIUM 42The Plugin Groups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_init() function in all versions up to, and including, 2.0.6.CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00487 · Published 2024-02-21 · No fix listed CWE-862