CVE-2023-46607

Summary

CVE-2023-46607 is a Missing Authorization vulnerability affecting WP iCal Availability, a plugin used to display iCal calendars on WordPress websites. The issue arises due to poorly configured access control security levels, enabling unauthorized users to exploit this vulnerability. WP iCal Availability versions from n/a through 1.0.3 are susceptible to this vulnerability. This flaw can potentially lead to serious consequences, such as unauthorized access or data breaches. It's crucial for WordPress users to update their WP iCal Availability plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.