CVE-2023-2494

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin to modify access to the plugin when it should only be the administrator's privilege.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
May 24, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-249407.5Windows Pragmatic General Multicast (PGM) Denial of Service VulnerabilityCVE-2023-249419.8Windows Network File System Remote Code Execution VulnerabilityCVE-2023-249427.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-249439.8Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityCVE-2023-249446.5Windows Bluetooth Driver Information Disclosure VulnerabilityCVE-2023-249455.5Windows iSCSI Target Service Information Disclosure VulnerabilityCVE-2023-249467.8Windows Backup Service Elevation of Privilege VulnerabilityCVE-2023-249478.8Windows Bluetooth Driver Remote Code Execution VulnerabilityCVE-2023-249487.4Windows Bluetooth Driver Elevation of Privilege VulnerabilityCVE-2023-249497.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-24954.3The Greeklish-permalink WordPress plugin through 3.3 does not implement correct authorization or nonce checks in the cyrtrans_ajax_old AJAX CVE-2023-249506.5Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-2494: High severity, CVSS 8.8 | Vulnix