VYPR

FooSales

by WordPress

CVEs (1)

  • CVE-2026-93548Oct 9, 2026
    risk 0.00cvss —epss —

    The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an…