CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 3.8.5.
Explanation of Vulnerability in Simple Terms
Essential Blocks for Gutenberg versions up to 3.8.5 lack proper authorization checks on certain administrative functions. An unauthenticated attacker can read sensitive data and modify site content without logging in. Update to a version newer than 3.8.5 to fix this vulnerability.
What an attacker can do
Read sensitive data and modify site content without authentication.
Potential impact on your site
Unauthorized users can view and alter your site's content and settings without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
