Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Visualizer 4.0.6 Clear all filters
TI-2026-59339 CVE-2026-86782 · GHSA-6v38-qwxj-3wr2

Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR

Priority LOW 25

The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00307 Published 2026-09-11 Fixed in 4.0.6 CWE-639
TI-2026-59336 CVE-2026-86779 · GHSA-p8f8-hfx5-63r6

Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart

Priority LOW 13

The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-object ownership verification, allowing users with the Contributo…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00281 Published 2026-09-11 Fixed in 4.0.6 CWE-862