WordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerability

CVE-2023-33215

What is CVE-2023-33215?

A missing authorization vulnerability exists in the Tagbox product provided by Taggbox, which exploits incorrectly configured access control security levels. This can potentially allow unauthorized users to gain access to restricted areas, leading to data exposure and other security risks. Users of Tagbox versions from n/a through 3.3 are urged to assess their configurations to mitigate this vulnerability and enhance security measures.

References