Another Security Vulnerability

what’s the flag about? Can you share details please?

Thank you! ??

Here’s what SolidWP is reporting even after upgrade to v5.0.6:

DetailsBroken Access Control vulnerability discovered by Abdi Pranata (Patchstack Alliance) in WordPress Plugin Welcome Email Editor (versions <= 5.0.5)

Vulnerable versions<= 5.0.5

CVE: CVE-2023-47756

Classification: Broken Access Control

Publicly disclosed: November 13, 2023

https://patchstack.com/database/vulnerability/welcome-email-editor/wordpress-welcome-email-editor-plugin-5-0-5-broken-access-control-vulnerability?_a_id=431

Hi David

Any update on this issue or should I delete the plugin, because I’m still receiving vulnerability warnings from Solid Security Pro?

Thanks.

Guess it’s time to delete this plugin as no action appears to have been taken.

We’ve fixed the vulnerability yesterday and are going to push the update later today ??