Missing Authorization Flaw in Social Proof Testimonials by Repuso
CVE-2023-46196

4.3MEDIUM

Key Information:

Vendor
WordPress
Status
Social Proof Testimonials And Reviews By Repuso
Vendor
CVE Published:
2 January 2025

Summary

A missing authorization vulnerability in the Repuso Social Proof Testimonials and Reviews plugin allows attackers to exploit incorrectly configured access controls. This can lead to unauthorized access to sensitive features or information. Users of versions up to 4.97 should review their configurations and apply necessary security measures to prevent potential exploits.

Affected Version(s)

Social proof testimonials and reviews by Repuso <= 4.97

References

https://patchstack.com/database/wordpress/plugin/social-t...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Abdi Pranata (Patchstack Alliance)
.