What is CVE-2023-6029?

CVE-2023-6029 is a high-severity vulnerability in Spider-themes Eazydocs, classified under Missing Authorization. CVSS score: 7.5/10. Published 2024-01-15.

How severe is CVE-2023-6029?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Spider-themes Eazydocs

CVE-2023-6029

The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and does not ensure that they are documents from the plugin, allowing unauthenticated users to delete arbitrary posts, as well a…

Vulnerability class: Broken Access Control

EPSS: 0.002 (16.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Spider-themes Eazydocs
Unknown Eazydocs — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

contact@wpscan.com (Exploit, technical-description, Third Party Advisory, exploit, vdb-entry)

Frequently asked questions

What is CVE-2023-6029?: CVE-2023-6029 is a high-severity vulnerability in Spider-themes Eazydocs, classified under Missing Authorization. CVSS score: 7.5/10. Published 2024-01-15.
How severe is CVE-2023-6029?: High severity. CVSS v3 base score is 7.5 out of 10.