← CVE Intelligence

CVE-2023-33923

Broken Access Control leading to Arbitrary Plugin Activation in multiple HashThemes themes PUBLISHED

Description (CNA)

Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral: from n/a through 1.8.0; HashOne: from n/a through 1.3.0.

Affected (CNA)

Vendor / productVersions
HashThemes / Viral Newsaffected n/a through 1.4.5
HashThemes / Viralaffected n/a through 1.8.0
HashThemes / HashOneaffected n/a through 1.3.0

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.