CVE-2023-41957

NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-41957
CWE	https://cwe.mitre.org/data/definitions/269.html

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-41957

CWE

https://cwe.mitre.org/data/definitions/269.html

Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.This issue affects Simple Membership: from n/a through 4.3.4.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Potential Mitigations

https://cwe.mitre.org/data/definitions/122.html
https://cwe.mitre.org/data/definitions/233.html
https://cwe.mitre.org/data/definitions/58.html

References

https://patchstack.com/database/vulnerability/simple-membership/wordpress-simple-membership-plugin-4-3-4-unauthenticated-membership-role-privilege-escalation-vulnerability?_s_id=cve

Improper Privilege Management

Weakness

Potential Mitigations

Related Attack Patterns

References