Cryptocurrency Widgets – Price Ticker & Coins List <= 2.6.2 is vulnerable to Broken Access Control vulnerability

Unauthenticated

Published
2023-07-03

The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on one of its functions in versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to perform unauthorized actions.

CVE

https://www.cve.org/CVERecord?id=CVE-2023-36681

CVSS

Score:5.3

Severity:Medium

Version: 2.6.2

There is a patch available in v2.6.3 and we strongly recommend you update to this version as soon as possible.