CVE-2023-36684 – WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability

https://notcve.org/view.php?id=CVE-2023-36684

21 Jul 2023 — Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7.5. Vulnerabilidad de autorización faltante en Brainstorm Force Convert Pro. Este problema afecta a Convert Pro: desde n/a hasta 1.7.5. The Convert Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check in versions up to, and including, 1.7.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unau... • https://patchstack.com/database/vulnerability/convertpro/wordpress-convert-pro-plugin-1-7-5-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •