CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Meta slider and carousel with lightbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta slider and carousel with lightbox: from n/a through 1.6.2.
Explanation of Vulnerability in Simple Terms
The Meta Slider and Carousel with Lightbox plugin for WordPress does not properly check user permissions before allowing certain actions. An unauthenticated attacker can modify plugin data without authorization. The vulnerability affects versions up to 1.6.2. Site administrators should update to a version newer than 1.6.2 to resolve this issue.
What an attacker can do
Modify plugin settings or data without logging in or having permission.
Potential impact on your site
Attackers can alter slider configurations, carousel content, or lightbox settings without authorization.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
