CVE-2023-41866: WordPress Automatic YouTube Gallery plugin <= 2.3.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Plugins360 Labs Automatic YouTube Gallery automatic-youtube-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic YouTube Gallery: from n/a through <= 2.3.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-41866?
CVE-2023-41866 is classified as a high-severity vulnerability due to its impact on access control in the Automatic YouTube Gallery plugin.
How do I fix CVE-2023-41866?
To fix CVE-2023-41866, update the Automatic YouTube Gallery plugin to version 2.3.4 or later, which resolves the broken access control issue.
What are the potential risks associated with CVE-2023-41866?
The potential risks associated with CVE-2023-41866 include unauthorized access to sensitive data and functionalities within the Automatic YouTube Gallery plugin.
Which versions of the Automatic YouTube Gallery are affected by CVE-2023-41866?
CVE-2023-41866 affects versions of the Automatic YouTube Gallery plugin up to and including 2.3.3.
Who is responsible for addressing CVE-2023-41866?
Website administrators and developers using the affected versions of the Automatic YouTube Gallery plugin are responsible for addressing CVE-2023-41866 by applying the necessary updates.