WordPress Woo Custom Emails plugin <= 2.2 - Broken Access Control vulnerability

CVE-2023-32507

What is CVE-2023-32507?

A vulnerability exists in the Woo Custom Emails plugin developed by wp3sixty, due to missing authorization controls. This flaw allows an attacker to exploit wrongly configured access control security levels, potentially leading to unauthorized access to sensitive data or functionality. The affected versions include all prior to 2.2. It's essential for users of this plugin to review their access configurations and implement necessary security measures to mitigate the risks associated with this vulnerability.

References