CVE-2023-0717

creationtimestamp| type| source ---|---|--- 2023-02-08 07:23:53+00:00| seen| Telegram/BK4p4u8y0cQegLLYFtp8d3RyNccFWJNuH81RUGBKD2Ul2Hw...

CVE-2023-0717

The CVE-2023-0717 entry concerns the Wicked Folders WordPress plugin. A missing capability check in the ajax_delete_folder function in versions up to and including 2.18.16 allows authenticated users with subscriber-level permissions and above to perform administrator-only actions (modifying the f...

WordPress Wicked Folders Plugin <= 2.18.16 is vulnerable to Broken Access Control

Software Wicked Folders Type Plugin Vulnerable versions = 2.18.16 Fixed in 2.18.17 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-0717 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID db3e0ac8c3e4 Credits Marco Wotschka Requir...