MainWP Wordfence Extension Vulnerable to Missing Authorization
CVE-2023-22699
5.4MEDIUM
What is CVE-2023-22699?
A missing authorization vulnerability has been identified in the MainWP Wordfence Extension, which could potentially allow unauthorized users to activate plugins without proper permissions. This issue affects all installations of the extension from initial versions up to and including version 4.0.7. Users of the MainWP Wordfence Extension are advised to assess their security configurations and take necessary actions to mitigate potential exploitation of this vulnerability.
Affected Version(s)
MainWP Wordfence Extension <= 4.0.7