CVE-2023-6496

Publication date

2024-01-11 08:32:26

Family

Wordfence

State

PUBLISHED

Description

The Manage Notification E-mails plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.8.5 via the card_famne_export_settings function. This makes it possible for unauthenticated attackers to obtain plugin settings.