CVE-2023-6947: 
WordPress vulnerability analysis and mitigation

The vulnerability identified as CVE-2023-6947 affects the WP Hide & Security Enhancer plugin versions up to and including 2.5.1. This security flaw was discovered and disclosed in December 2024, allowing authenticated attackers with contributor-level permissions or higher to read the contents of arbitrary folders on the server (NVD Dashboard).

The vulnerability has been assigned a CVSS v3.1 score of 7.7 (HIGH), indicating a significant security risk. The vulnerability type is classified as a Missing Authorization issue, which allows authenticated users with contributor-level access or higher to access and read arbitrary folder contents on the affected server (NVD Dashboard).

The vulnerability enables authenticated attackers to read arbitrary folder contents on the server, potentially exposing sensitive information and configuration files. This could lead to further system compromise or unauthorized access to confidential data (NVD Dashboard).

Website administrators running the WP Hide & Security Enhancer plugin should update to a version newer than 2.5.1 as soon as possible to address this vulnerability. If immediate updating is not possible, consider temporarily disabling the plugin or restricting user roles with contributor-level access (NVD Dashboard).