Now officially on WordPress.org

CVE Database / CVE-2023-47778

CVE · Medium

CVE-2023-47778 — LuckyWP Scripts Control [luckywp-scripts-control] < 1.2.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-47778 LuckyWP Scripts Control [luckywp-scripts-control] < 1.2.2 Missing Authorization Medium 4.3 < 1.2.2 1.2.2 2023-11-14 —

CVE-2023-47778

The LuckyWP Scripts Control plugin versions below 1.2.2 contain a broken access control vulnerability that allows unauthenticated or unprivileged users to perform actions reserved for higher-privilege accounts due to missing authorization checks and nonce validation. The plugin was discontinued on September 12, 2023 and removed from availability following the discovery of this security flaw. No patch has been released to address this issue.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings