What is GHSA-g4v7-86p8-gx99?

GHSA-g4v7-86p8-gx99 is a security advisory published by GitHub Security Advisories with Medium severity. The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of...

Which CVE IDs does GHSA-g4v7-86p8-gx99 cover?

GHSA-g4v7-86p8-gx99 covers the following CVE IDs: CVE-2026-18943. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g4v7-86p8-gx99?

GHSA-g4v7-86p8-gx99 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-g4v7-86p8-gx99MediumCVSS 6.5

The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of...

Vendor

GitHub Security Advisories

Published

August 12, 2026

Last Modified

August 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-18943 →

📋 Description

The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary user, post and term metadata, including data belonging to administrators.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-18943
https://wpscan.com/vulnerability/9f2f3db0-1031-4e16-96f2-12a02b97ad06
https://github.com/advisories/GHSA-g4v7-86p8-gx99