CVE-2023-52176

Authentication Bypass by Spoofing vulnerability in miniorange Malware Scanner allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Malware Scanner: from n/a through 4.7.1...

CVE-2023-52176

CVE-2023-52176 describes an Authentication Bypass by Spoofing in the Miniorange Malware Scanner (WordPress plugin). Affected products: Malware Scanner from n/a through version 4.7.1. Root cause per entry: bypasses access controls (ACLs) through spoofed authentication, enabling access to functiona...

WordPress Malware Scanner Plugin <= 4.7.1 is vulnerable to Bypass Vulnerability

Software Malware Scanner Type Plugin Vulnerable versions = 4.7.1 Fixed in 4.7.2 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-52176 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f6265f1e1b85 Credits Brandon Roldan Required...