CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
What the vulnerability does
The Ultimate Addons for Gutenberg plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 1.14.7. This is due to missing capability checks on several AJAX actions. This makes it possible for authenticated attackers with subscriber+ roles to update the plugin's settings.
Explanation of Vulnerability in Simple Terms
Spectra Gutenberg Blocks versions up to 1.14.7 lack proper authorization checks on certain administrative functions. A logged-in user with low privileges can perform actions they should not be permitted to do by clicking a malicious link or visiting a crafted page. This affects the confidentiality, integrity, and availability of site data.
What an attacker can do
A low-privilege logged-in user can perform unauthorized administrative actions by clicking a malicious link.
Potential impact on your site
Unauthorized users may modify site content, settings, or access sensitive data depending on which functions lack authorization.
Conditions required to exploit
Attacker must have a low-privilege account on the site and trick a user into clicking a link or visiting a page.
Key dates
External resources
Related vulnerabilities
