OneWebsite WP Repost vulnerable to Missing Authorization
CVE-2023-26522

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
WP Repost
Vendor
CVE Published:
9 December 2024

What is CVE-2023-26522?

A security issue has been identified within the WP Repost plugin developed by OneWebsite, which exposes users to unnecessary risks through a missing authorization vulnerability. This flaw stems from improperly configured access control security levels, allowing unauthorized access which could lead to data manipulation or exposure. All users on versions prior to or including 0.1 are recommended to assess their installation configurations and apply necessary security measures to mitigate potential exploits.

Affected Version(s)

WP Repost <= 0.1

References

https://patchstack.com/database/wordpress/plugin/wp-repos...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Prasanna V Balaji (Patchstack Alliance)
.