CVE-2023-47836

Summary

CVE-2023-47836 is a critical vulnerability affecting WP Meta and Date Remover, a WordPress plugin. The flaw stems from a missing authorization mechanism, enabling unauthorized users to manipulate incorrectly configured access control security levels. This issue poses a significant risk, as attackers can exploit it to gain unauthorized access to affected WordPress sites running the plugin from version n/a through 2.3.0. Site administrators are urged to update the plugin to the latest version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.