WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerability
CVE-2023-41870
8.8HIGH
What is CVE-2023-41870?
A critical access control vulnerability exists in the Themeum WP Crowdfunding plugin, which allows unauthorized users to exploit incorrectly configured security levels. This issue affects versions of the plugin from its initial release to 2.1.5. Proper access control measures are necessary to mitigate risks associated with unauthorized access and data exposure.
Affected Version(s)
WP Crowdfunding <= 2.1.5