Missing Authorization Vulnerability Affects ThemePunch Essential Grid

CVE-2023-47771

Summary

A critical missing authorization vulnerability has been identified in the Essential Grid plugin developed by ThemePunch OHG. This security flaw allows unauthorized access to certain functionalities within the plugin, potentially enabling an attacker to manipulate contents or configurations without proper authentication. The vulnerability impacts all versions of Essential Grid up to and including 3.0.18, necessitating customers to promptly apply security patches or updates to mitigate risks associated with unauthorized access.

References