CVE-2023-6279

CVE-2023-6279 affects Woostify Sites Library (WordPress plugin) versions before 1.4.8. The issue is broken access control in an AJAX action: authenticated users (e.g., subscribers) can update arbitrary blog options and set them to ‘activated’, which the sources describe as potentially leading to ...