CVE-2023-46632

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Jan 2, 2025
CWE ID 862

Summary

CVE-2023-46632 is a critical vulnerability affecting the David Cramer My Shortcodes plugin. The issue stems from a missing authorization check, which enables unauthorized access to functionalities. Poorly configured security levels can be exploited, putting versions 2.3 and below at risk. Attackers may misuse this flaw to gain unwarranted privileges, potentially leading to data breaches or system takeover. It is imperative that users upgrade their plugin to a secure version as soon as possible to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share