CVE-2023-6369

Name of the Vulnerable Software and Affected Versions Export WP Page to Static HTML/CSS plugin for WordPress versions up to, and including, 2.1.9

Description The issue is related to a missing capability check on multiple AJAX actions, allowing authenticated attackers with subscriber-level access and above to access and modify sensitive data. This can lead to the disclosure of sensitive information or the performance of unauthorized actions, such as saving advanced plugin settings.

Recommendations For Export WP Page to Static HTML/CSS plugin for WordPress versions up to, and including, 2.1.9, update to a version higher than 2.1.9 to resolve the issue. As a temporary workaround, consider restricting access to the AJAX actions until a patch is available. Restrict subscriber-level access and above to minimize the risk of exploitation.