CVE-2023-25446

The HappyFiles Pro WordPress plugin, versions through 1.8.1 , is vulnerable to a Broken Access Control (Missing Authorization) issue. The root cause is an improperly configured access control security level and a missing capability check , which allows unauthorized users with Subscriber privilege...

WordPress HappyFiles Pro Plugin <= 1.8.1 is vulnerable to Broken Access Control

Software HappyFiles Pro Type Plugin Vulnerable versions = 1.8.1 Fixed in 1.8.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25445 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 518a5cea4b57 Credits Dave Jong Patchstack...