Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-0328
HistoryMar 06, 2023 - 2:15 p.m.

CVE-2023-0328

2023-03-0614:15:10
[email protected]
web.nvd.nist.gov
2
wpcode wordpress plugin
privilege checks
ajax actions
authentication keys
unauthorized users
manipulation

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

25.6%

JSON

The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to allowing any authenticated user who can edit posts to call the endpoints related to WPCode Library authentication (such as update and delete the auth key).

Affected configurations

Nvd
Node
wpcodewpcodeRange<2.0.7wordpress
VendorProductVersionCPE
wpcodewpcode*cpe:2.3:a:wpcode:wpcode:*:*:*:*:*:wordpress:*:*

Related

cvelist 1
wpexploit 1
openvas 1
wpvulndb 1
prion 1
cve 1
wordfence 1
cvelist
cvelist
CVE-2023-0328 WPCode < 2.0.7 - Contributor+ WPCode Library Auth Key Update/Deletion
2023-03-06 13:33:58
wpexploit
wpexploit
WPCode < 2.0.7 - Contributor+ WPCode Library Auth Key Update/Deletion
2023-02-09 00:00:00
openvas
openvas
WordPress WPCode - Insert Headers and Footers Plugin < 2.0.7 Improper Authorization Vulnerability
2023-03-09 00:00:00
wpvulndb
wpvulndb
WPCode < 2.0.7 - Contributor+ WPCode Library Auth Key Update/Deletion
2023-02-09 00:00:00
prion
prion
Privilege escalation
2023-03-06 14:15:00
cve
cve
CVE-2023-0328
2023-03-06 14:15:10
wordfence
wordfence
Wordfence Intelligence CE Weekly Vulnerability Report (Feb 6, 2023 to Feb 12, 2023)
2023-02-16 15:21:24

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

25.6%

JSON
Related for NVD:CVE-2023-0328
cvelist1wpexploit1openvas1wpvulndb1prion1cve1wordfence1