CVE-2023-3998

CVE-2023-3998 affects the WordPress wpDiscuz plugin. The vulnerability is an unauthorized data modification flaw due to a missing authorization check in the helper workflow (function: userRate), impacting versions up to and including 7.6.3. An unauthenticated attacker can increase or decrease a p...

WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR)

Software wpDiscuz Type Plugin Vulnerable versions = 7.6.3 Fixed in 7.6.4 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-3998 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5e7dc9378ede Credits FearZzZz Required...