VULNERABILITY INTELLIGENCE

CVE-2023-7268

CVSS score6.5 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2024-07-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as subscriber, to delete arbitrary widgets

Weakness classification

  • nvd@nist.gov: CWE-862

Primary references