Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-7268

ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion

Description

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as subscriber, to delete arbitrary widgets

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown ArtPlacer Widget

Default version status: unaffected

  • 0 to < 2.21.2affected

References