CVE-2023-2757

CVE-2023-2757 concerns Waiting: One-click countdowns for WordPress. A missing capability check on saveLang in versions up to 0.6.2 enables authorization bypass, enabling subscriber-level access to plugin data and potentially stored XSS. The Wordfence writeup states the vulnerability is currently ...