WordPress GS Pins for Pinterest plugin <= 1.6.7 - Broken Access Control vulnerability

CVE-2023-32593

Summary

A missing authorization vulnerability has been identified in GS Pins for Pinterest that allows attackers to exploit incorrectly configured access control security levels. This weakness enables unauthorized users to access and potentially manipulate sensitive functions within the plugin. The vulnerability affects all versions from n/a through 1.6.7. It's essential for users of GS Pins for Pinterest to review their configurations and apply necessary updates to safeguard against potential exploitation.

References