Vulnerabilities > CVE-2023-6496 - Missing Authorization vulnerability in Freeamigos Manage Notification E-Mails

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

freeamigos

CWE-862

NVD

Published: 2024-01-11

Updated: 2024-01-17

Summary

The Manage Notification E-mails plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.8.5 via the card_famne_export_settings function. This makes it possible for unauthenticated attackers to obtain plugin settings.

Vulnerable Configurations

Part	Description	Count
Application	Freeamigos Freeamigos Manage Notification E Mails 1.0 Freeamigos Manage Notification E Mails 1.1.0 Freeamigos Manage Notification E Mails 1.2.0 Freeamigos Manage Notification E Mails 1.3.0 Freeamigos Manage Notification E Mails 1.4.0 Freeamigos Manage Notification E Mails 1.4.1 Freeamigos Manage Notification E Mails 1.4.2 Freeamigos Manage Notification E Mails 1.5.0 Freeamigos Manage Notification E Mails 1.5.1 Freeamigos Manage Notification E Mails 1.6.0 Freeamigos Manage Notification E Mails 1.6.1 Freeamigos Manage Notification E Mails 1.7.0 Freeamigos Manage Notification E Mails 1.7.1 Freeamigos Manage Notification E Mails 1.8.0 Freeamigos Manage Notification E Mails 1.8.2 Freeamigos Manage Notification E Mails 1.8.3 Freeamigos Manage Notification E Mails 1.8.4	17

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References