Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-46188 EUVD-2023-50431GHSA-xggq-f45p-384m

WordPress Freesoul Deactivate Plugins plugin <= 2.1.3 - Broken Access Control vulnerability

Published Jan 2, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Jose Mortellaro Product: Freesoul Deactivate Plugins – Plugin manager and cleanup

Description

Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Freesoul Deactivate Plugins – Plugin manager and cleanup: from n/a through 2.1.3.

Affected products

VendorProductAffectedFixed
Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup ≤ 2.1.3 —

References