CVE-2023-25067: 
WordPress vulnerability analysis and mitigation

A Missing Authorization vulnerability was discovered in the WordPress We're Open! plugin affecting versions up to 1.45. The vulnerability allows exploiting incorrectly configured access control security levels (Patchstack).

The vulnerability is classified as a broken access control issue with a CVSS v3.1 base score of 4.3 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. The issue stems from missing authorization checks that could allow unprivileged users to execute higher privileged actions (Patchstack).

The vulnerability has a low severity impact and allows unauthorized access to certain plugin functionalities. The security issue affects the integrity of access control mechanisms but does not impact confidentiality or availability of the system (Patchstack).

The vulnerability has been fixed in version 1.46 of the We're Open! plugin. Users are recommended to update to this version or later to address the security issue. Patchstack has also issued a virtual patch to mitigate this vulnerability by blocking potential attacks until users can update to the fixed version (Patchstack).