Missing Authorization Vulnerability Affects Schema Pro
CVE-2023-36683

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Schema Pro
Vendor
CVE Published:
19 June 2024

What is CVE-2023-36683?

A missing authorization vulnerability exists in the WP SCHEMA PRO Plugin, allowing unauthorized access to certain functionalities. This vulnerability affects users of the Schema Pro product from version 2.7.8 and older. Ensuring that proper access controls are in place is crucial for mitigating the risks associated with this vulnerability, as it could allow attackers to exploit the system and gain unauthorized access to sensitive areas.

Affected Version(s)

Schema Pro <= 2.7.8

References

https://patchstack.com/database/vulnerability/wp-schema-p...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.