CVE-2023-4153

Summary

CVE-2023-4153 is a privilege escalation vulnerability affecting the BAN Users plugin for WordPress. In versions up to 1.5.3, there is a missing capability check on the 'w3dev_save_ban_user_settings_callback' function. This issue grants authenticated attackers, including those with minimal permissions like a subscriber, the ability to modify plugin settings. By doing so, they can access the ban and unban functionality and even set the role of the unbanned user, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.