CVE-2023-45765
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 2, 2025
Updated: Jan 31, 2025
CWE ID 862
Summary
CVE-2023-45765 is a new vulnerability impacting weDevs WP ERP, an accounting and HR management plugin for WordPress. The issue involves missing authorization controls, which can be exploited if access levels are incorrectly configured. Attackers can potentially gain unauthorized access to sensitive data or functionality within the plugin, affecting all versions from n/a through 1.12.6. WeDevs has been urged to release a patch to address this security concern promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- weDevs