CVE-2023-25993: WordPress Top 10 – Popular posts plugin for WordPress plugin <= 3.2.3 - Broken Access Control vulnerability
Published Dec 9, 2024
·Updated
Missing Authorization vulnerability in Ajay Top 10 top-10 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top 10: from n/a through <= 3.2.3.
Affected Software
3 affected components
WebberZone Top 10<=3.2.3
WebberZone Popular posts plugin for WordPress<=3.2.3
WebberZone Top 10 Wordpress<3.2.4
Remediation
Information
Update the WordPress Top 10 plugin to the latest available version (at least 3.2.4).
Event History
Dec 9, 2024
CVE Published
via MITRE·11:31 AM
Data Sourced
via MITRE·11:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-25993?
CVE-2023-25993 is classified as a Missing Authorization vulnerability which can lead to unauthorized access.
2
How do I fix CVE-2023-25993?
To fix CVE-2023-25993, update WebberZone Top 10 to version 3.2.4 or later where the issue is resolved.
3
What versions of WebberZone Top 10 are affected by CVE-2023-25993?
CVE-2023-25993 affects WebberZone Top 10 versions up to and including 3.2.3.
4
Can CVE-2023-25993 affect my website's security?
Yes, CVE-2023-25993 can severely compromise your website's security by allowing unauthorized users to access restricted areas.
5
What is the nature of the vulnerability in CVE-2023-25993?
The nature of the vulnerability in CVE-2023-25993 is related to incorrectly configured access control security levels.