Missing Authorization Vulnerability Affects ThemePunch Essential Grid
CVE-2023-47771
8.3HIGH
What is CVE-2023-47771?
A critical missing authorization vulnerability has been identified in the Essential Grid plugin developed by ThemePunch OHG. This security flaw allows unauthorized access to certain functionalities within the plugin, potentially enabling an attacker to manipulate contents or configurations without proper authentication. The vulnerability impacts all versions of Essential Grid up to and including 3.0.18, necessitating customers to promptly apply security patches or updates to mitigate risks associated with unauthorized access.
Affected Version(s)
Essential Grid <= 3.0.18