WordPress Premium Addons PRO plugin <= 2.9.0 - Broken Access Control vulnerability

CVE-2023-37869

What is CVE-2023-37869?

A missing authorization vulnerability exists in the Premium Addons PRO plugin that can allow unauthorized users to access features and data that should be restricted. This flaw affects various versions, including from no specified version until 2.9.0. Exploiting this vulnerability may enable attackers to manipulate the functionality of the plugin or access sensitive information, highlighting the importance of maintaining proper access controls in WordPress plugins.

References