CVE-2023-4943 in BEAR Plugin
Résumé
par MITRE • 25/10/2023
The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to a missing capability check on the woobe_bulkoperations_visibility function. This makes it possible for authenticated attackers (subscriber or higher) to manipulate products.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.