WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.10 - Broken Access Control vulnerability

CVE-2023-33996

Summary

A missing authorization vulnerability in the Anti-Spam Protection Spam protection, AntiSpam, FireWall by CleanTalk has been identified, which can lead to exploitation stemming from incorrectly configured access control security settings. This issue impacts versions up to and including 6.10, allowing potential attackers to exploit the system and bypass intended security restrictions. Proper measures should be taken to configure access controls accurately to mitigate this security risk and protect against unauthorized access.

References