WP Clinic
Log in Sign up

CVE · Medium

CVE-2023-48277 — Super Progressive Web Apps [super-progressive-web-apps] < 2.2.22

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-48277 Super Progressive Web Apps [super-progressive-web-apps] < 2.2.22 Missing Authorization Medium 4.3 < 2.2.22 2.2.22 2023-11-22

CVE-2023-48277

No patched version is available. Abdi Pranata discovered and reported this Broken Access Control vulnerability in WordPress Super Progressive Web Apps Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.

Source: Patchstack

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.