Medium · 4.3 CVE-2023-41689 EUVD-2023-46181GHSA-wgqm-vc4g-q5f9

WordPress Post to Google My Business (Google Business Profile) plugin <= 3.1.14 - Broken Access Control vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Koen Reus Product: Post to Google My Business (Google Business Profile)

Description

Missing Authorization vulnerability in Koen Reus Post to Google My Business (Google Business Profile) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post to Google My Business (Google Business Profile): from n/a through 3.1.14.

Affected products

Vendor	Product	Affected	Fixed
Koen Reus	Post to Google My Business (Google Business Profile)	≤ 3.1.14	—

References

https://patchstack.com/database/wordpress/plugin/post-to-google-my-business/vulnerability/wordpress-post-to-google-my-business-google-business-profile-plugin-3-1-14-broken-access-control-vulnerability?_s_id=cve vdb-entry