CVE-2023-7268

ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion

CVSS 6.5 MEDIUMEPSS 0.4%

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as subscriber, to delete arbitrary widgets

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Unknown · ArtPlacer Widget

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://wpscan.com/vulnerability/9ac233dd-e00d-4aee-a41c-0de6e8aaefd7/