WordPress LuckyWP Scripts Control plugin <= 1.2.1 - Broken Access Control vulnerability

CVE-2023-29239

What is CVE-2023-29239?

A missing authorization flaw in the LuckyWP Scripts Control plugin may allow unauthorized users to exploit misconfigured access control security levels. This vulnerability can potentially lead to unauthorized actions being performed on behalf of legitimate users, impacting the overall security and integrity of WordPress sites utilizing this plugin. It is crucial for administrators to scrutinize their configurations and apply necessary patches to safeguard against potential exploitation.

References