TI-2024-08219 CVE-2024-8853 · GHSA-rfjc-67p6-84v6Webo-facto <= 1.40 - Unauthenticated Privilege EscalationPriority MEDIUM 50The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00642 · Published 2024-09-20 · No fix listed CWE-269