WordPress Comment Blacklist Updater plugin <= 1.1.0 - Broken Access Control vulnerability

CVE-2023-44147

What is CVE-2023-44147?

A vulnerability has been identified in Apasionados Comment Blacklist Updater, characterized by missing authorization checks in the access control configuration. This issue enables attackers to exploit improperly configured security levels, potentially allowing unauthorized access. Affected versions include Comment Blacklist Updater from n/a through 1.1.0, highlighting the need for users to review and enhance configuration settings to mitigate risks associated with this flaw.

References