Alt Manager <= 1.6.1 is vulnerable to Broken Access Control vulnerability

Unauthenticated

Published
2023-12-06

The Alt Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on an unknown function in versions up to, and including, 1.6.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVE

https://www.cve.org/CVERecord?id=CVE-2023-50373

CVSS

Score:5.3

Severity:Medium

Version: 1.6.1

There is a patch available in v1.6.2 and we strongly recommend you update to this version as soon as possible.