CVE-2023-6066

Summary

CVE-2023-6066 is a vulnerability affecting the WP Custom Widget area plugin for WordPress. This issue permits users with subscriber+ privileges to bypass capability and nonce checks, enabling them to create, delete, or manipulate menus on the site through the plugin's AJAX action callback functions. This security weakness could potentially lead to unauthorized modifications of the website's navigational structure, potentially impacting user experience and site security. Users are encouraged to upgrade to the latest version of the plugin, which addresses this vulnerability, to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.