CVE-2023-50373: 
WordPress vulnerability analysis and mitigation

A Missing Authorization vulnerability was identified in the WordPress Alt Manager plugin versions 1.6.1 and below. The vulnerability was discovered by Nguyen Xuan Chien and was disclosed on December 7, 2023. This security issue has been assigned CVE-2023-50373 and received a CVSS score of 5.3, indicating a medium severity level (Patchstack Database).

The vulnerability is classified as a Broken Access Control issue, which stems from missing authorization, authentication, or nonce token checks in certain functions. This security flaw could potentially allow unprivileged users to execute actions typically reserved for users with higher privileges (Patchstack Database).

The vulnerability is considered moderately dangerous and is expected to become exploited. The CVSS score of 5.3 reflects its medium severity level, indicating potential risks to affected WordPress installations (Patchstack Database).

The vulnerability has been fixed in version 1.6.2 of the Alt Manager plugin. Users are advised to update to version 1.6.2 or later immediately to resolve the security issue. Additionally, Patchstack has issued a virtual patch to mitigate this issue by blocking potential attacks until users can update to the fixed version (Patchstack Database).