CVE-2023-46632
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 2, 2025
CWE ID 862
Summary
CVE-2023-46632 is a critical vulnerability affecting the David Cramer My Shortcodes plugin. The issue stems from a missing authorization check, which enables unauthorized access to functionalities. Poorly configured security levels can be exploited, putting versions 2.3 and below at risk. Attackers may misuse this flaw to gain unwarranted privileges, potentially leading to data breaches or system takeover. It is imperative that users upgrade their plugin to a secure version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share