CVE-2023-47663: 
WordPress vulnerability analysis and mitigation

The WordPress Foyer plugin version 1.7.5 and earlier contains a Content Injection vulnerability (CVE-2023-47663). This security issue was discovered by Abdi Pranata and was publicly disclosed on November 8, 2023. The vulnerability affects the content management functionality of the Foyer plugin for WordPress installations (Patchstack).

The vulnerability has been assigned a CVSS score of 4.6 (Low severity) and is classified under the OWASP Top 10 category A5: Broken Access Control. The security issue allows for improper access control that could lead to content injection. The vulnerability requires Contributor-level privileges to exploit (Patchstack).

If exploited, this vulnerability could allow malicious actors to inject their own content into pages and posts of the affected WordPress website. The impact could extend to the potential injection of phishing pages into the compromised website (Patchstack).

The vulnerability has been assessed as having a low severity impact and is considered unlikely to be exploited. It requires Contributor-level access to the WordPress installation to be exploited (Patchstack).

As of the disclosure date, no official fix has been made available for this vulnerability. Given the low severity rating, virtual patching (vPatch) has been deemed unnecessary (Patchstack).