CVE-2023-7268 ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion

2024-07-1906:00:04

WPScan

www.cve.org

cve-2023-7268

artplacer widget

wordpress plugin

arbitrary widget deletion

authorisation check

authenticated users

subscriber

EPSS

Percentile

9.3%

JSON

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as subscriber, to delete arbitrary widgets

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "ArtPlacer Widget",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "2.21.2"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

wpscan.com/vulnerability/9ac233dd-e00d-4aee-a41c-0de6e8aaefd7/

EPSS

Percentile

9.3%

JSON

Related for CVELIST:CVE-2023-7268