WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability

CVE-2023-41875

Summary

A missing authorization vulnerability has been identified in WP Directory Kit, a plugin by wpdirectorykit.com. This vulnerability allows for the exploitation of incorrectly configured access control settings, which can result in unauthorized access to sensitive information or functionalities. The issue affects versions of WP Directory Kit from n/a through 1.2.6, highlighting the necessity for users to review their security configurations to mitigate possible risks associated with this access control failure.

References