Missing Authorization in LuckyWP Scripts Control by LuckyWP
CVE-2023-47778
4.3MEDIUM
What is CVE-2023-47778?
A Missing Authorization vulnerability exists in the LuckyWP Scripts Control, which may allow unauthorized users to exploit access controls that are not correctly configured. This issue primarily affects versions of LuckyWP Scripts Control up to and including 1.2.1, posing significant security risks to websites utilizing this plugin. Properly implemented access control mechanisms are essential to prevent unauthorized actions by threat actors, and failure to secure these controls can result in severe breaches and data exposure.
Affected Version(s)
LuckyWP Scripts Control <= 1.2.1