CVE-2023-28416 — WordPress Chankhe theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation vulnerability

CVE-2023-28416

WordPress Chankhe theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Sparkle Themes Chankhe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chankhe: from n/a through 1.0.5.

Affected (CNA)

Vendor / product	Versions
Sparkle Themes / Chankhe	affected n/a through 1.0.5

CWE

CWE-862

References

https://patchstack.com/database/wordpress/theme/chankhe/vulnerability/wordpress-chankhe-theme-1-0-5-authenticated-arbitrary-plugin-activation?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.