CVE-2023-6638
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jan 11, 2024
Updated: Jan 18, 2024
CWE ID 862
Summary
CVE-2023-6638 is a vulnerability affecting the GTG Product Feed for Shopping plugin for WordPress. The issue lies in the 'update_settings' function, which lacks proper capability checks in versions up to 1.2.4. This oversight allows unauthenticated attackers to manipulate plugin settings, posing a significant security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share