TI-2019-11745 CVE-2019-15650 · GHSA-mrg7-x5vh-pv4cThe stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has…Priority LOW 22The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes (such as disabling unattended theme updates) because of a nonce check error.CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00885 · Published 2019-08-27 · No fix listed