WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability

CVE-2024-43323

What is CVE-2024-43323?

ReviewX, a popular plugin by Patchstack, has been identified to possess a missing authorization vulnerability. This issue enables attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized access to sensitive functionalities and data within the plugin. Affected versions start from an unspecified version up to 1.6.28, emphasizing the need for users to assess their installed versions and apply necessary patches to mitigate the risk. Proper configuration of access controls is crucial in safeguarding against such vulnerabilities.

References