CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Tech Banker Backup Bank: WordPress Backup Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup Bank: WordPress Backup Plugin: from n/a through 4.0.28.
Explanation of Vulnerability in Simple Terms
Backup Bank, a WordPress backup plugin, fails to properly check user permissions before allowing certain actions. An authenticated user with low privileges can modify backup settings or data they should not have access to. The vulnerability affects versions up to 4.0.28. Site administrators should update the plugin to a version newer than 4.0.28.
What an attacker can do
Modify backup settings or data without proper authorization.
Potential impact on your site
Unauthorized users can alter backup configurations, potentially compromising backup integrity or availability.
Conditions required to exploit
Attacker must have a low-privilege WordPress account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
