CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Nate Reist Protected Posts Logout Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protected Posts Logout Button: from n/a through 1.4.5.
Explanation of Vulnerability in Simple Terms
The Protected Posts Logout Button plugin for WordPress contains a missing authorization check that allows unauthenticated attackers to modify site content and availability. An attacker can send network requests without authentication to exploit this flaw. Site administrators should update to a version newer than 1.4.5 to prevent unauthorized changes to posts and potential service disruption.
What an attacker can do
Modify or disable posts and site functionality without logging in.
Potential impact on your site
Unauthorized users can alter published posts and affect site availability without your knowledge.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
