CVE-2023-45104

CVE-2023-45104 is a missing authorization vulnerability (CWE-862) in the WPDeveloper BetterLinks plugin for WordPress, stemming from incorrectly configured access control security levels. The issue affects all versions of BetterLinks up to and including 1.6.0. It has a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), indicating high severity due to its network accessibility and lack of prerequisites for exploitation.

Unauthenticated attackers can exploit this vulnerability remotely over the network with low complexity and no user interaction required. Successful exploitation allows limited impacts across confidentiality, integrity, and availability, such as partial unauthorized access to data, minor modifications, or denial-of-service effects within the plugin's scope.

The Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/betterlinks/vulnerability/wordpress-betterlinks-plugin-1-6-0-broken-access-control-vulnerability?_s_id=cve details the broken access control issue in BetterLinks versions up to 1.6.0, recommending updates to patched versions for mitigation.