CVE-2023-3601

CVE-2023-3601 affects the Simple Author Box WordPress plugin prior to version 2.52. The issue is an insecure direct object reference (IDOR): the plugin outputs user information without verifying the user ID, allowing arbitrary disclosure to users with a role as low as Contributor. Root cause: lac...