CVE-2023-32094
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Dec 9, 2024
CWE ID 862
Summary
CVE-2023-32094 is a vulnerability affecting the Felix Welberg Extended Post Status plugin. The issue stems from a missing authorization check, enabling unauthorized users to manipulate incorrectly configured access control security levels. This flaw puts versions of Extended Post Status from n/a to 1.0.19 at risk, potentially allowing attackers to exploit it for malicious purposes. Organizations using this plugin are advised to update to a patched version immediately to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.