MainWP Wordfence Extension Vulnerable to Missing Authorization

CVE-2023-22699

Summary

A missing authorization vulnerability has been identified in the MainWP Wordfence Extension, which could potentially allow unauthorized users to activate plugins without proper permissions. This issue affects all installations of the extension from initial versions up to and including version 4.0.7. Users of the MainWP Wordfence Extension are advised to assess their security configurations and take necessary actions to mitigate potential exploitation of this vulnerability.

References