WordPress WP Docs plugin <= 1.9.8 - Broken Access Control

CVE-2023-30873

What is CVE-2023-30873?

A missing authorization vulnerability in the WP Docs plugin by Fahad Mahmood enables attackers to exploit incorrectly configured access control security levels. This issue compromises the integrity of the access control system and can allow unauthorized access to sensitive information within WP Docs. The vulnerability affects all versions of the plugin up to and including 1.9.8, potentially exposing users to significant security risks if not addressed.

References