← Back to CVE List
CVE-2023-7268
The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticated users, such as subscriber, to delete arbitrary widgets
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt