CVE-2023-4627

Summary

CVE-2023-4627 is a vulnerability affecting the LadiApp plugin for WordPress. This issue stems from a missing capability check on the save_config() function present in versions up to 4.4. This oversight allows authenticated attackers, possessing subscriber-level access or higher, the ability to unauthorizedly modify the 'ladipage_config' option. Consequently, attackers can manipulate plugin settings, leading to potential security risks and functional inconsistencies. Users are advised to update the LadiApp plugin to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.