CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import: from n/a through 3.0.1.
Explanation of Vulnerability in Simple Terms
The qTranslate X Cleanup and WPML Import plugin for WordPress does not properly check user permissions before allowing certain actions. A logged-in user with low privileges can modify data they should not have access to. The vulnerability affects versions up to 3.0.1. Site administrators should update to a version newer than 3.0.1.
What an attacker can do
A low-privilege logged-in user can modify site data without proper authorization.
Potential impact on your site
Unauthorized users can alter site content or settings, potentially corrupting translations or import data.
Conditions required to exploit
Attacker must have a low-privilege WordPress account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
