WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability

CVE-2023-30488

What is CVE-2023-30488?

A missing authorization vulnerability exists in WP OnlineSupport's Featured Post Creative plugin, allowing for exploitation through incorrectly configured access control security levels. This vulnerability can potentially enable unauthorized access to restricted features and content, thus posing a significant threat to the security of WordPress installations utilizing this plugin version 1.2.7 and earlier. It is crucial for users to review their security configurations and apply necessary updates to mitigate any risks associated with this flaw.

References