CVE-2023-6983

Summary

CVE-2023-6983 is a vulnerability affecting the Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress. This issue, present in all versions up to 1.2.1, exposes a Insecure Direct Object Reference (IDOR) vulnerability. Authenticated attackers with contributor-level access or higher can exploit this vulnerability through the vg_display_data shortcode, which lacks proper validation on a user-controlled key. By manipulating this key, attackers can potentially gain unauthorized access to sensitive post meta data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.