CVE-2023-4923
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2023-4923, a vulnerability categorized as CWE-352 (Cross-Site Request Forgery), affects the BEAR for WordPress plugin in versions up to and including 1.1.3.3. The vulnerability arises from missing or incorrect nonce validation on the woobe_bulkoperations_delete function, enabling unauthenticated attackers to delete products through a forged request if they can deceive a site administrator into taking an action like clicking on a link. This vulnerability poses a medium risk with a base severity of 4.3 and an exploitability score of 2.8 according to the National Vulnerability Database (NVD). The affected products include various versions of the BEAR for WordPress plugin. It is crucial for organizations using this plugin to remediate this vulnerability promptly to prevent potential unauthorized deletion of products and maintain the integrity of their websites.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions