WordPress Click To Tweet plugin <= 2.0.14 - Broken Access Control vulnerability

CVE-2023-41857

What is CVE-2023-41857?

A missing authorization vulnerability has been identified in the ClickToTweet plugin, which allows unauthorized access to sensitive features due to improperly configured access controls. This issue affects users who utilize Click To Tweet versions from n/a up to 2.0.14, potentially leading to unauthorized actions that compromise the integrity of user data and content management. It is essential for users to review their security measures and ensure that the plugin is updated to the latest version to mitigate risks associated with this vulnerability.

References