think-plugs-admin vulnerabilities

CVEs whose affected-version data names the think-plugs-admin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111655Low· 3.8

yesterday

ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit

ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding t…

▾ Sunlitzoujingli · think-plugs-adminvia CVEORG