CVE-2023-0711

creationtimestamp| type| source ---|---|--- 2023-02-08 07:23:45+00:00| seen| https://t.me/cibsecurity/57744...

CVE-2023-0711

CVE-2023-0711 affects the Wicked Folders WordPress plugin up to version 2.18.16, where a missing capability check in the ajax_save_state function allows authorization bypass by authenticated users with subscriber-level permissions or higher, enabling actions typically reserved for administrators ...

WordPress Wicked Folders Plugin <= 2.18.16 is vulnerable to Broken Access Control

Software Wicked Folders Type Plugin Vulnerable versions = 2.18.16 Fixed in 2.18.17 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-0711 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID f6e0caeea0c4 Credits Marco Wotschka Requir...