CVE-2023-0447

The My YouTube Channel plugin before version 3.23.0 contains an authorization bypass vulnerability stemming from inadequate capability verification in the clear_all_cache function. Authenticated users with subscriber-level access or higher can exploit this flaw to clear the plugin's cache, despite lacking the proper permissions to perform this action. This vulnerability allows low-privileged account holders to disrupt plugin functionality through unauthorized cache manipulation.

Based on public CVE data (MITRE/NVD).