plugin

Foyer Vulnerabilities

1 known security issue reported for the Foyer WordPress plugin. Most recent disclosed Nov 7, 2023.

1 medium

Running Foyer on your site? Check whether your installed version is affected.

Foyer <= 1.7.5 - Content Injection via Improper Access Control

medium

The Foyer – Digital Signage for WordPress plugin for WordPress is vulnerable to unauthorized content injection due to an insufficient capability check on the editing functionality in all versions up to, and including, 1.7.5. This makes it possible for authenticated attackers, with contributor access and above, to publi...

CVSS:: 4.3
Affected:: up to 1.7.5
Fix:: No patched version reported
Disclosed:: Nov 7, 2023

CVE-2023-47663 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database