blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2023-4703

HIGH 7.5 CVSS 3.1
Published
January 16, 2024
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating user details, allowing an unauthenticated attacker to update the details of any user. Updating the password of an Admin user leads to privilege escalation.

Affected products and versions

  • Unknown All in One B2B for WooCommerce — Up to and including 1.0.3
  • all_in_one_b2b_for_woocommerce_project all_in_one_b2b_for_woocommerce — Up to and including 1.0.3

References

  • wpscan.com https://wpscan.com/vulnerability/83278bbb-90e6-4465-a46d-60b4c703c11a/ Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record