CVE-2023-0328

Katalog CVE

CVSS 4.3 · Medium EPSS 0,80%

Kerentanan Incorrect Authorization pada wpcode. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to allowing any authenticated user who can edit posts to call the endpoints related to WPCode Library authentication (such as update and delete the auth key).

Rincian

Terbit di NVD

6 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

0,80% peluang dieksploitasi; lebih tinggi dari 55,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/3c4318a9-a3c5-409b-a52e-edd8583c3c43 exploit · advisory pihak ketiga