WordPress Product Category Tree plugin <= 2.5 - Broken Access Control vulnerability

CVE-2023-29173

Summary

A critical issue exists in the AWESOME TOGI Product Category Tree that arises from missing authorization checks. This vulnerability leads to improperly configured access control security levels, enabling unauthorized access and potentially exposing sensitive data. The affected versions of the Product Category Tree range from n/a up to version 2.5. Organizations using this plugin should assess their security configurations and apply necessary updates to mitigate this vulnerability.

References