CVE-2023-0711

CVE-2023-0711 affects the Wicked Folders plugin for WordPress, specifically versions up to and including 2.18.16. This authorization bypass vulnerability allows authenticated users with subscriber-level permissions or higher to modify the plugin's folder structure view state, an action typically reserved for administrators. The vulnerability has a CVSS score of 4.3 (Medium) due to its low attack complexity and the potential for unauthorized data modification. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.