CVE-2023-37869 MEDIUM

CVE-2023-37869: WordPress Premium Addons PRO plugin <= 2.9.0 - Broken Access Control vulnerability

Vendor Premium Addons
Product Premium Addons PRO
Weakness CWE-862 · Missing authorization
Published June 19, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Missing Authorization vulnerability in Premium Addons Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0.

Key dates

02Disclosure timeline

June 19, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-64261 WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability CVE-2023-4106 A guest user can perform various actions on public playbooks CVE-2026-44571 Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permission CVE-2025-67576 WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerability CVE-2025-68072 WordPress Easy Property Listings plugin <= 3.5.20 - Broken Access Control vulnerability