Medium · 5.4 CVE-2023-48776 EUVD-2023-52809GHSA-37wh-hqrh-8rw4

WordPress canvasio3D Light plugin <= 2.5.0 - Broken Access Control vulnerability

Published Dec 9, 2024 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: virtuellwerk Product: canvasio3D Light

Description

Missing Authorization vulnerability in virtuellwerk canvasio3D Light canvasio3d-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects canvasio3D Light: from n/a through <= 2.5.0.

Affected products

Vendor	Product	Affected	Fixed
virtuellwerk	canvasio3D Light	≤ 2.5.0	—

References

https://patchstack.com/database/Wordpress/Plugin/canvasio3d-light/vulnerability/wordpress-canvasio3d-light-plugin-2-4-6-broken-access-control-vulnerability?_s_id=cve vdb-entry