CVE-2023-45760
Published: 02 January 2025
Description
Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.3.
Security Summary
CVE-2023-45760 is a missing authorization vulnerability, classified under CWE-862, in the wpDiscuz WordPress plugin developed by AdvancedCoding. The flaw enables exploiting incorrectly configured access control security levels and affects all versions of wpDiscuz from n/a through 7.6.3.
The vulnerability carries a CVSS v3.1 base score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Low-privileged users with network access can exploit it with low attack complexity and no user interaction, achieving low-impact unauthorized disclosure of confidential information without affecting integrity or availability.
The Patchstack advisory provides further details on this broken access control vulnerability in wpDiscuz version 7.6.3 at https://patchstack.com/database/Wordpress/Plugin/wpdiscuz/vulnerability/wordpress-wpdiscuz-plugin-7-6-3-broken-access-control-vulnerability?_s_id=cve.
Details
- CWE(s)