CVE-2023-7268

July 19, 2024, 1:01 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

ArtPlacer Widget WordPress plugin

  • before 2.21.2

Source

contact@wpscan.com

Tags

CVE-2023-7268 details

Published : July 19, 2024, 6:15 a.m.
Last Modified : July 19, 2024, 1:01 p.m.

Description

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as subscriber, to delete arbitrary widgets

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
This website uses the NVD API, but is not approved or certified by it.