Missing Authorization Vulnerability in Fantastic Content Protector Free Allows Exploiting Incorrectly Configured Access Control Security Levels
CVE-2023-25048
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 9 December 2024
What is CVE-2023-25048?
A missing authorization vulnerability in Fantastic Plugins' Fantastic Content Protector Free enables unauthorized access to sensitive content due to improperly configured access control security levels. This issue impacts versions from n/a up to 2.6, potentially allowing attackers to exploit the vulnerability and gain access to restricted areas that should only be accessible to authorized users. These improper configurations can lead to data exposure and other security risks, making it essential for users to assess their configurations and implement necessary updates.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Fantastic Content Protector Free <= 2.6
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved