VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jan 11, 2024· Updated Apr 8, 2026

CVE-2023-7019

CVE-2023-7019

Description

The LightStart – Maintenance Mode, Coming Soon and Landing Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the insert_template function in all versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to change page designs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Themeisle/Lightstart2 versions
    cpe:2.3:a:themeisle:lightstart:*:*:*:*:*:wordpress:*:*+ 1 more
    • cpe:2.3:a:themeisle:lightstart:*:*:*:*:*:wordpress:*:*range: <=2.6.8
    • (no CPE)range: <=2.6.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.