WordPress Uncode Core plugin <= 2.8.8 - Privilege Escalation vulnerability

CVE-2023-51515

What is CVE-2023-51515?

The vulnerability identified in Undsgn Uncode Core introduces a missing authorization flaw that could be exploited for privilege escalation. This issue impacts versions of the Uncode Core plugin in WordPress, allowing an attacker to gain elevated privileges and potentially access restricted functionalities without proper authorization. Users of versions from n/a to 2.8.8 may be at risk. Timely patching and updates are recommended to mitigate potential exploitation risks.

References