CVE Database /
CVE-2023-46311
CVE · Low
CVE-2023-46311 — Comments – wpDiscuz [wpdiscuz] < 7.6.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-46311
|
Comments – wpDiscuz [wpdiscuz] < 7.6.4 |
Authorization Bypass Through User-Controlled Key |
Low
2.7
|
< 7.6.4
|
7.6.4 |
2023-10-22 |
—
|
CVE-2023-46311
The wpDiscuz plugin before version 7.6.4 contains an insecure direct object reference vulnerability that could permit an attacker to circumvent access controls and interact with restricted database elements or sensitive information. Researcher Revan Arifio identified this authorization bypass flaw, which has been resolved in version 7.6.4 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings