Incorrectly Configured Access Control Exposes WP-RecentComments to Missing Authorization Vulnerability

CVE-2023-23886

Summary

The WP-RecentComments plugin, developed by mg12, suffers from a missing authorization vulnerability. This issue arises from improperly configured access control security levels, which could potentially be exploited to gain unauthorized access to certain functions within the plugin. Versions affected include all prior to 2.2.7. It's crucial for users of the WP-RecentComments plugin to assess their configurations and apply necessary updates to mitigate any risks associated with this vulnerability.

References