Missing Authorization Vulnerability in Freesoul Deactivate Plugins by Jose Mortellaro

CVE-2023-46188

Summary

The Freesoul Deactivate Plugins – Plugin manager and cleanup, developed by Jose Mortellaro, contains a missing authorization vulnerability. This flaw allows unauthorized users to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions or manipulation of the plugin’s functionalities. Affected versions include 2.1.3 and earlier, underscoring the importance of applying appropriate security measures and ensuring configuration integrity to protect against such vulnerabilities.

References