CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-7268

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as subscriber, to delete arbitrary widgets

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 34.2%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2023-7268

Artplacer » Artplacer Widget » Version: 1.0

cpe:2.3:a:artplacer:artplacer_widget:1.0
Artplacer » Artplacer Widget » Version: 1.4

cpe:2.3:a:artplacer:artplacer_widget:1.4
Artplacer » Artplacer Widget » Version: 1.4.7

cpe:2.3:a:artplacer:artplacer_widget:1.4.7
Artplacer » Artplacer Widget » Version: 1.7.7

cpe:2.3:a:artplacer:artplacer_widget:1.7.7
Artplacer » Artplacer Widget » Version: 1.8.33

cpe:2.3:a:artplacer:artplacer_widget:1.8.33
Artplacer » Artplacer Widget » Version: 2

cpe:2.3:a:artplacer:artplacer_widget:2
Artplacer » Artplacer Widget » Version: 2.20

cpe:2.3:a:artplacer:artplacer_widget:2.20
Artplacer » Artplacer Widget » Version: 2.20.4

cpe:2.3:a:artplacer:artplacer_widget:2.20.4
Artplacer » Artplacer Widget » Version: 2.20.6

cpe:2.3:a:artplacer:artplacer_widget:2.20.6
Artplacer » Artplacer Widget » Version: 2.21.1

cpe:2.3:a:artplacer:artplacer_widget:2.21.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-7268

Products

Pricing

Contact Us