CVE-2023-1865 is a medium-severity vulnerability affecting the YourChannel plugin for WordPress, specifically versions up to and including 1.2.3. This security issue allows unauthenticated attackers to delete YouTube channels from the plugin due to a missing capability check when resetting plugin settings. Systems running the vulnerable versions of the YourChannel plugin are at risk, and it is recommended to update to version 1.2.4 or a newer patched version to address the issue.

How do I know if I'm affected?

If you're using the YourChannel plugin for WordPress, you might be affected by the vulnerability. To determine if you're at risk, check if your plugin version is up to and including 1.2.3. This security issue allows unauthenticated attackers to delete YouTube channels from the plugin due to a missing capability check when resetting plugin settings.

What should I do if I'm affected?

If you're affected by the vulnerability, it's crucial to update your YourChannel plugin to version 1.2.4 or a newer patched version. To do this, simply log in to your WordPress dashboard, navigate to the Plugins section, find the YourChannel plugin, and click on the Update button. This will help protect your YouTube channels from unauthorized deletion.

Is CVE-2023-1865 in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-1865 vulnerability affecting the YourChannel plugin for WordPress is not listed in CISA's Known Exploited Vulnerabilities Catalog. This medium-severity issue allows unauthorized users to delete YouTube channels from the plugin due to a missing capability check when resetting settings. To protect your system, update the plugin to version 1.2.4 or a newer patched version.

Weakness enumeration

The CVE-2023-1865 vulnerability in the YourChannel plugin for WordPress allows unauthorized attackers to delete YouTube channels due to a missing capability check. Update to version 1.2.4 or newer to fix the issue.

For more details

CVE-2023-1865 is a medium-severity vulnerability affecting the YourChannel plugin for WordPress, which can be mitigated by updating to version 1.2.4 or newer. For a comprehensive analysis of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the links below.

• YourChannel.php Source Code

• YourChannel Plugin on WordPress.org

• Wordfence Vulnerability Report