CVE-2023-47780: 
WordPress vulnerability analysis and mitigation

The CVE-2023-47780 is a Missing Authorization vulnerability affecting the EasyAzon - Amazon Associates Affiliate WordPress plugin versions 5.1.0 and below. The vulnerability was discovered by Abdi Pranata and was publicly disclosed on November 14, 2023. This security issue has been assigned a CVSS score of 4.3, indicating a medium severity level (Patchstack).

The vulnerability is classified as a Broken Access Control issue, which stems from missing authorization, authentication, or nonce token checks in certain functions. This security flaw could potentially allow unprivileged users to execute actions typically reserved for users with higher privileges (Patchstack).

The vulnerability is considered moderately dangerous and is expected to become exploited. As a Broken Access Control issue, it could potentially allow unauthorized users to perform privileged actions within the WordPress installation running the affected plugin (Patchstack).

Users are advised to update to EasyAzon version 5.1.1 or later to resolve the vulnerability. For users unable to update immediately, Patchstack has issued a virtual patch to mitigate this issue by blocking potential attacks until the update can be performed (Patchstack).