CVE-2023-2353

The CHP Ads Block Detector plugin for WordPress is vulnerable to unauthorized plugin settings update and reset due to a missing capability check on the chp_abd_action function in versions up to, and including, 3.9.4. This makes it possible for subscriber-level attackers to change or reset plugin settings. CVE-2023-36509 appears to be a duplicate of this issue.

• CWE-862

• https://plugins.trac.wordpress.org/changeset/2920522/chp-ads-block-detectorPatch
• https://plugins.trac.wordpress.org/changeset/2922313/chp-ads-block-detectorPatch
• https://plugins.trac.wordpress.org/changeset/2926660/chp-ads-block-detectorPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4eca64d7-6e33-4b8e-af37-a3e8bbf2b76f?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset/2920522/chp-ads-block-detectorPatch
• https://plugins.trac.wordpress.org/changeset/2922313/chp-ads-block-detectorPatch
• https://plugins.trac.wordpress.org/changeset/2926660/chp-ads-block-detectorPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4eca64d7-6e33-4b8e-af37-a3e8bbf2b76f?source=cveThird Party Advisory

Published

Aug 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23524A denial-of-service issue was addressed with improved input …7.5
• CVE-2023-23525This issue was addressed with improved checks. This issue is…7.8
• CVE-2023-23526This was addressed with additional checks by Gatekeeper on f…9.8
• CVE-2023-23527The issue was addressed with improved checks. This issue is …5.5
• CVE-2023-23528An out-of-bounds read was addressed with improved bounds che…6.5
• CVE-2023-23529A type confusion issue was addressed with improved checks. T…8.8
• CVE-2023-23530The issue was addressed with improved memory handling. This …8.6
• CVE-2023-23531The issue was addressed with improved memory handling. This …8.6
• CVE-2023-23532This issue was addressed with improved checks. This issue is…8.8
• CVE-2023-23533A logic issue was addressed with improved checks. This issue…5.5
• CVE-2023-23534The issue was addressed with improved checks. This issue is …5.5
• CVE-2023-23535The issue was addressed with improved memory handling. This …5.5