WordPress Link Whisper Free plugin <= 0.6.3 - Unauthenticated Broken Access Control vulnerability

CVE-2023-32506

What is CVE-2023-32506?

A serious access control vulnerability exists within the Link Whisper Free plugin for WordPress, allowing unauthorized users to exploit incorrectly configured security levels. This vulnerability compromises the access permissions, enabling potential attackers to access sensitive functions and data without proper authorization. The flaw affects all versions leading up to and including 0.6.3, making it essential for users to ensure their plugins are updated and to review access controls to mitigate risks associated with unauthorized access.

References