WordPress Blogger Buzz theme <= 1.2.2 - Broken Access Control vulnerability

CVE-2023-30476

What is CVE-2023-30476?

A missing authorization vulnerability has been identified in the Sparkle Themes Blogger Buzz product. This flaw allows an attacker to exploit incorrectly configured access control security levels, leading to unauthorized access to sensitive functionalities or data. The issue is present in versions of Blogger Buzz from n/a to 1.2.2, which may allow malicious users to manipulate access rights and perform actions without proper authorization. Website owners should prioritize reviewing their access controls and applying necessary updates or mitigations to safeguard their sites.

References