CVE-2023-7292
CVSS V2 None
CVSS V3 None
Description
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to dismiss admin notices.
Overview
- CVE ID
- CVE-2023-7292
- Assigner
- Wordfence
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-10-16T06:43:45.569Z
- Last Modified Date
- 2024-10-16T15:28:26.163Z
Weakness Enumerations
References
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-7292 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7292 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-10-17 13:02:30 | Added to TrackCVE |