CVEvulnerability

CVE-2023-7268

6.5 MEDIUM Published 2024-07-19 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-07-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-862

Description

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as subscriber, to delete arbitrary widgets

Affected configurations

• artplacer artplacer widget (<= 2.21.1)

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References