CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Trending/Popular Post Slider and Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trending/Popular Post Slider and Widget: from n/a through 1.5.7.
Explanation of Vulnerability in Simple Terms
The Trending/Popular Post Slider and Widget plugin for WordPress does not properly check user permissions before allowing modifications to plugin settings. An attacker on the network can change the plugin's configuration without authentication, potentially altering how posts are displayed or injecting malicious content into the slider output.
What an attacker can do
Modify plugin settings and configuration without logging in.
Potential impact on your site
Attackers can alter how trending posts are displayed or inject malicious content into your site's slider.
Conditions required to exploit
Network access to the WordPress site; no authentication required.
Key dates
External resources
Related vulnerabilities
