CVE-2023-47805

The WPCafe plugin for WordPress versions before 2.2.23 contains a broken access control vulnerability that allows unauthenticated or low-privilege users to perform actions restricted to higher-privilege accounts due to missing authorization checks and nonce verification in certain functions. This flaw was discovered by Abdi Pranata and remains unfixed as of the advisory date. An attacker could exploit this weakness to execute administrative or protected operations without proper authentication or permission validation.

Based on public CVE data (MITRE/NVD).