CVE-2023-4626

Summary

CVE-2023-4626 is a vulnerability affecting the LadiApp plugin for WordPress. This issue allows authenticated attackers, with subscriber-level access and above, to bypass capability checks on the 'ladiflow_save_hook()' function. Consequently, they can unauthorizedly modify the 'ladiflow_hook_configs' option. This vulnerability poses a significant risk to WordPress sites using the LadiApp plugin, particularly those running affected versions up to and including 4.3. It is strongly recommended that users update to the latest version of the plugin to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.