CVE-2023-37967

Summary

CVE-2023-37967 is a critical vulnerability affecting the DirectoryPress plugin from versions n/a through 3.6.2. This issue stems from a missing authorization control, enabling unauthorized access to restricted areas. Hackers can exploit this weakness and gain unauthorized access to sensitive data or perform unwarranted actions. Organizations using DirectoryPress are advised to update to the latest version or apply temporary workarounds to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.