Lucene search

Rafie Muhammad (Patchstack)PATCHSTACK:E138E20D899A31F3B7681FB9D1076D13

HistoryNov 28, 2023 - 12:00 a.m.

WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Broken Access Control

2023-11-2800:00:00

Rafie Muhammad (Patchstack)

patchstack.com

elementor

vulnerable version

cve-2023-48761

patchstack

crocoblock

broken access control

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

6.1

Confidence

High

JSON

Software

JetBlocks For Elementor

Type

Plugin

Vulnerable versions

<= 1.3.8

Fixed in

1.3.8.1

OWASP Top 10

A1: Broken Access Control

Classification

Broken Access Control

CVE

CVE-2023-48761

Patch priority

Medium

CVSS severity

Medium (6.3)

Developer

Crocoblock

PSID

fd2a2b07e17e

Credits

Rafie Muhammad Patchstack Rafie Muhammad (Patchstack)

Required privilege

Subscriber

Published

28 November, 2023

Expand full details Have additional information or questions about this entry? Let us know.

Solution

We advise to mitigate or resolve the vulnerability immediately.

Affected configurations

Vulners

Node

motopressjetblocks_for_elementorRange≤1.3.8wordpress

VendorProductVersionCPE
motopressjetblocks_for_elementor*cpe:2.3:a:motopress:jetblocks_for_elementor:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
motopress	jetblocks_for_elementor	*	cpe:2.3:a:motopress:jetblocks_for_elementor::::::wordpress::*

References

www.cve.org/CVERecord?id=CVE-2023-48761