CVE-2023-40003

Summary

CVE-2023-40003 is a Missing Authorization vulnerability affecting weDevs WP Project Manager. The issue stems from incorrectly configured access control security levels, potentially enabling unauthorized users to exploit the system. This vulnerability poses a risk to WP Project Manager versions from n/a to 2.6.7. Successful exploitation could result in significant data compromise or unauthorized modifications to project information. It is essential for affected users to apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.