CVE-2023-0447

The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clear_all_cache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to clear the plugin's cache.

• CWE-862

• https://plugins.trac.wordpress.org/browser/youtube-channel/trunk/youtube-channel.php?rev=2482795#L1502Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844200%40youtube-channel&new=2844200%40youtube-channel&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/486b6a75-d101-4f3a-8436-6c23dd0ff200?source=cve
• https://plugins.trac.wordpress.org/browser/youtube-channel/trunk/youtube-channel.php?rev=2482795#L1502Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844200%40youtube-channel&new=2844200%40youtube-channel&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/486b6a75-d101-4f3a-8436-6c23dd0ff200Third Party Advisory

Published

Jan 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0440Observable Discrepancy in GitHub repository healthchecks/hea…5.3
• CVE-2023-0441The Gallery Blocks with Lightbox WordPress plugin before 3.0…8.1
• CVE-2023-0442The Loan Comparison WordPress plugin before 1.5.3 does not v…6.1
• CVE-2023-0443The AnyWhere Elementor WordPress plugin before 1.2.8 disclos…5.3
• CVE-2023-0444A privilege escalation vulnerability exists in Delta Electro…8.8
• CVE-2023-0446The My YouTube Channel plugin for WordPress is vulnerable to…5.5
• CVE-2023-0448The WP Helper Lite WordPress plugin, in versions < 4.3, retu…6.1
• CVE-2023-0449Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-0450An issue has been discovered in GitLab affecting all version…4.6
• CVE-2023-0451Econolite EOS versions prior to 3.2.23 lack a password requi…7.5
• CVE-2023-0452Econolite EOS versions prior to 3.2.23 use a weak hash algor…5.3
• CVE-2023-0453The WP Private Message WordPress plugin (bundled with the Su…4.3