CVE-2023-50886

Cross-Site Request Forgery CSRF, Incorrect Authorization vulnerability in wpWax Legal Pages.This issue affects Legal Pages: from n/a through 1.3.7...

CVE-2023-50886

The CVE-2023-50886 entry covers the WordPress plugin wpWax Legal Pages (versions 1.3.7 (i.e., 1.3.8 or later). Public sources report a base score of 8.0 (NVD) indicating HIGH severity, while PatchStack notes a lower 4.3 MEDIUM score, highlighting conflicting assessments. Exploitation details are...

WordPress Legal Pages Plugin <= 1.3.7 is vulnerable to Broken Access Control

Software Legal Pages Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-50886 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7f6bbe4cdc0f Credits thiennv Required privilege...