CVE-2023-32798mediumobserved exploitationCWE-862

CVE-2023-32798: medium-severity vulnerability in 10up Simple Page Ordering

WordPress Simple Page Ordering plugin <= 2.5.0 - Broken Access Control vulnerability

Published · Updated

Follow this CVE+ Monitor Simple Page Ordering

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

35Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendcvss 5.3epss 0.6%
from disclosure to weapon
Published on NVDDec 13
VulnCheck+669d
Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through 2.5.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
10up · Simple Page Ordering